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ABSTRACT 


Feedback shift registers have proven to be efficient periodic binary 
sequence generators. Polynomials of degree r over a Galois field 
characteristic 2 <GF ( 2 ) ) characterize the behavior of shift registers with 
line.r-logic feedback. 

The object of this report is the algorithmic determination of the 
trinomial of lowest degree, when it exists, that contains a given irreducible 
polynomial over GF(2) as a factor. This corresponds to embedding the behavior 
of an r-stage shift register with linear-logic feedback into that of an 
n-stage shift register with a single two-input modulo 2 summer (i.e., 
Exclusive-OR gate) in its feedback. This leads to Very Large Scale Integrated 
(VLSI) circuit architecture of maximal regularity (i.e., identical cells) with 
intercell communications serialized to a maximal degree. 


ACRONYMS 


Cp clock pulse 

CP Compatible Pair 

CPI Clock Pulse Interval 

FSR Feedback Shift Register 

GF Galois Field 

ISFSR shift register with interstage feedback 

LCM Least Common Multiple 

MOSFET Metal-Oxide-Semiconductor Field-Effect Transistor 

NMOS N Channel Metal-Oxide Semiconductor 

PN Pseudonoise 

SSFSR shift register with single stage feedback 

VLSI Very Large Scale Integrated circuits 
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SECTION I 


BACKGROUND 

The root a of a primitive polynomial f(x) is a generator of the cyclic 

group 


a 



e e e 
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The 2 r - 1 elements of the multiplicative group with the element 0 adjoined 
are members of a Galois Field of order 2 r (i.e., GF(2 r )). The elements 0 
and 1 comprise GF(2), a subfield of GF(2 r ) , and GF(2 r ) is a finite 
extension of GF(2). 


Each element in GF(2 r ) satisfies 


2' . t 2 f -l o 

x - x * x(x - 1) ■ 0 


The element 0 satisfies x ■ 0 and each of the nonzero elements satisfies 


x 2 '- 1 - 1-0 


Example 1 

Consider the primitive polynomial GF(2) 

f(x) ■ x^ ♦ x 3 + x 2 ♦ x ♦ 1 


with one of 6 distinct roots denoted by Cl. Every nonzero element in GF(2^) 
is expressible as an integer power of 0t . 


■ b 5 a 5 + b 4 a 4 ♦ b 3 a 3 + b 2 a 2 + ♦ b Q 



where € GF(2) end Q ^ is among Che 2 r - 1 roots of unity. The 
polynomial in Of ia of degree 5 or leas since 

a 6 ■ a 5 ♦ a 2 ♦ a ♦ l 

The element 0 is the constant zero polynomial denoted by 

a* * o»a 5 + o*a 4 ♦ . . . + o 

Members of GF(2^), generated by a with a* adjoined, appear in Table 1-1. 

The binary operation of "addition" defined on the field elements is 
termwise sum modulo 2 (i.e., vector addition over GF(2)). 

For example, 


111100 (a 14 ) 

♦ 1 1 0 1 1 1 (a 54 ) 

ooioii (a 19 ) 

The binary operation of "multiplication" on the field elements is 
defined as 


(b 5 of ♦ b^a 4 +, ... , ♦ b Q ) (djd 5 + d 4 a 4 ♦ + d Q ) 

with the result reduced modulo 


f(a) -a 6 +a 5 ♦a 2 + a + l 
Since each element is expressible as a power of Of, 

a i a j -a (i * M mod 63 
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Table 1-1. GF(2 b ) Generated by (X , a Root of f(x) ■ x b ♦ x* ♦ x 2 ♦ x ♦ 1, 
with a* Adjoined 


i of a * 

or 

B 




m 

i of Cl * 

b 5 

B 

b 3 

b 2 

b l 

b o 

★ 

0 

0 

0 

0 

0 

0 

31 

0 

0 

1 

1 

1 

0 








32 

0 

1 

l 

l 

0 

0 

0 

0 

0 

0 

0 

0 

1 

33 

l 

1 

1 

0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

34 

0 

1 

0 

1 

1 

l 

2 

0 

0 

0 

1 

0 

0 

35 

1 

0 

l 

1 

1 

0 

3 

0 

0 

1 

0 

0 

0 

36 

1 

l 

l 

0 

1 

1 

4 

0 

1 

0 

0 

0 

0 

37 

0 

1 

0 

0 

0 

1 

5 

1 

0 

0 

0 

0 

0 

38 

1 

0 

0 

0 

1 

0 

6 

1 

0 

0 

1 

1 

1 

39 

1 

0 

0 

0 

1 

1 

7 

1 

0 

1 

0 

0 

1 

40 

1 

0 

0 

0 

0 

1 

8 

1 

1 

0 

1 

0 

1 

41 

1 

0 

0 

1 

0 

1 

9 

0 

0 

1 

l 

0 

1 

42 

1 

0 

1 

l 

0 

1 

10 

0 

1 

1 

0 

1 

0 

43 

1 

1 

1 

1 

0 

l 

11 

1 

1 

0 

1 

0 

0 

44 

0 

1 

1 

1 

0 

1 

12 

0 

0 

1 

l 

1 

1 

45 

1 

1 

1 

0 

1 

0 

13 

0 

1 

1 

1 

1 

0 

46 

0 

1 

0 

0 

1 

1 

14 

1 

1 

1 

1 

0 

0 

47 

1 

0 

0 

1 

1 

0 

15 

0 

1 

1 

1 

1 

1 

48 

1 

0 

1 

0 

1 

1 

16 

1 

1 

1 

1 

1 

0 

49 

1 

1 

0 

0 

0 

1 

17 

0 

1 

1 

0 

1 

1 

50 

0 

0 

0 

1 

0 

1 

18 

1 

1 

0 

1 

l 

0 

51 

0 

0 

1 

0 

1 

0 

19 

0 

0 

1 

0 

1 

1 

52 

0 

1 

0 

1 

0 

0 

20 

0 

1 

0 

1 

1 

0 

53 

1 

0 

1 

0 

0 

0 

21 

1 

0 

1 

1 

0 

0 

54 

1 

1 

0 

1 

l 

1 

22 

1 

1 

1 

1 

1 

1 

55 

0 

0 

1 

0 

0 

1 

23 

0 

1 

1 

0 

0 

1 

56 

0 

1 

0 

0 

1 

0 

24 

1 

1 

0 

0 

1 

0 

57 

1 

0 

0 

1 

0 

0 

25 

0 

0 

0 

0 

1 

1 

58 

1 

0 

1 

1 

1 

1 

26 

0 

0 

0 

1 

1 

0 

59 

1 

1 

1 

0 

0 

1 

27 

0 

0 

1 

1 

0 

0 

60 

0 

1 

0 

1 

0 

1 

28 

0 

1 

1 

0 

0 

0 

61 

1 

0 

1 

0 

1 

0 

29 

1 

1 

0 

0 

0 

0 

62 

1 

l 

0 

0 

1 

1 

30 

0 

0 

0 

1 

1 

e 

A 
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Logarithm* of field element* to the base a ere provided by Table l-l to 
simplify multiplication of nonsero element* as follows: 


a 49 (l l 0 0 0 1) 

a 34 (0 l 0 l l l) 

a 34 a 49 ‘a 20 (0 l o i l o) 


The (multiplicative) order of a nonsero element a in GF(2 r ) is the 
least integer m for which a" • 1. Furthermore, m divides 2 r *• l, the 
order of the multiplicative group, in accordance with a corollary of a 
fundamental theorem due to Lagrange (see Reference 1). 

As presented in Reference 2, consider the operation cr which squares each 
of the roots of 


r 

g(x) ■ | j(x - a*) 
i-1 

any polynomial of degree r over GF(2). Noting that 

-1 = 1 mod 2 and (a ♦ b) 2 - a 2 ♦ b 2 over GF(2), 


then 


l g(x ) ] 




- a .) 

i 


2 


r 


r> -v 


2 


- lg(t)]2 - g( t 2) - g(x) 
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2 

The substitution t • * ii appropriately employed in proving that g(x) over 
CF(2) ia invariant under the operation o*. The root-squaring operation O’ on 
g(x) which laavea g(x) unchanged is termed an automorphism . If in particular 
g(x) of degree r ia irreducible, then g(x) has the following r distinct 
automorphisms: 


i rr 2 _r- 1 

1, o, o, ... , o 

with respect to CF(2 ). An operation on a root of g(x) is an automorphism 
if ar.d only if it is an integer power of o, the root-squaring operation. 
Consequently, g(x) has r distinct roots, namely, 




1 


r 2 2 

Since O’ maps a into O and a 

operation. 


Gt (from a 2 * 


1), & r is the identity 


The product of all irreducible polynomials over GF(2) whose degrees 
2 r 

divide r is x x - x. Complete factorisation is best illustrated by 
arranging the 2 r - 1 roots of unity into cyclotomic cosets (see References 2 
and 3). Given a primitive polynomial f(x) of degree r over CF(2). Each 
distinct roct is of order 2 r - 1, hence, a primitive root of unity. 

A fundamental property associated with the multiplicative order of field 
elements is as follows: 


If 0 has order m, then 


0 3 has order ra/(m,j) 

where (m,j) denotes the g reatest common divisor of m and j. Clearly m and 
m/(m,j) divide 2 r - 1, the number of nonzero elements in GF(2 r }. The 
integer (m, j) is called the index of the order of 0 3 . A primitive r 6 * 1 ' 
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degree polynomial has a, a primitive root of unity, as a root. Each of the r 
roots has order 2 r - 1 since (2 r - 1, 2 l ) ■ 1 for all i. 

The set of integers 

{i} • {l. 2, 4 2'- 1 } 

taken from the multiplicative group of integers modulo 2 r - 1 form a 
subgroup. The corresponding set 

{a 1 } - {a, a 2 , a 2 a 2 } 

contains the r distinct roots of f(x). The "generalized cosets" 

|iv| * jv, 2v, 4v, ... , (2 r - l)v| 

are nonoverlapping sets which together with the subgroup |i}, the special 
coset where v * 1, comprise the multiplicative group modulo 2 r - 1. If 
(2 r - 1, v) = 1, then {iv^ is a coset as defined in group theory. The 
elements of such a coset correspond to r (2 r - l)st primitive roots of unity 
whose minimal polynomial is a primitive polynomial over GF(2) (see 
Reference 4). There are </ ? (2 r - l)/r such cosets (including the subgroup) 
and, therefore, <P( 2 r - l)/r primitive polynomials of degree r over GF(2). 

The number-theoretic function <^(m), known as the Euler phi-function, is the 
number of positive integers no greater than m (a positive integer) that are 
relatively prime to m (see Appendix A). The integers a and m are termed 
relatively prime if (a, m) * 1. 

An "improper coset" results for values of v where (2 r - 1, v) ^ 1. If 
such a coset contains r distinct elements, the elements correspond to 
r (2 r - l)st nonprimitive roots of unity whose minimal polynomial is an 
irreducible nonprimitive rth degree polynomial over GF(2). Whereas the 
elements of a coset containing s < r distinct elements (where s necessarily 
divides r) correspond to s (2 8 - l)st roots of unity whose minimal 
polynomial is an irreducible polynomial of degree s over GF(2). 
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The product of the minimal polynomials associated with each of the 
cyclotomic cosets (i.e., generalised cosets which include improper cosets) 

2 r -l 

yields x -1. The set of minimal polynomials is comprised of all 
irreducible polynomials over GF(2) whose degrees divide r . 

Example 2 


The irreducible 
The 63 roots of unity 


2-1 

factors of x - 1 over GF(2) are given in Table 1-2. 
are generated by Q, a root of 


F(x) 


6 5 . 2 , A 

x + x + x + x + 


1 


Consider the conjugate roots (i.e., roots of the same minimal polynomial) 


„3 r* 6 ~ 33 

® ,Q , ... , Q 


corresponding to the cyclotomic coset 

jl*3, 2*3 2 5 *3j mod 63 - |3, 6 33 J 

The minimal polynomial for these roots is determined as follows: 

f(a 3 ) - (a 3 ) 6 + d $ (a 3 ) 5 + d 4 (a 3 ) 4 ♦ d 3 (a 3 ) 3 + d 2 (a 3 ) 2 + d^a 3 ) + l = o 

- a 18 + d a 15 + d.a 12 + d,a 9 + d,a 6 + d.a 3 + l = o 
5 4 3 2 1 

Substituting entries in Table 1-1 corresponding to the foregoing powers of a 
gives 
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Table 1-2. Irreducible Factors of x' 


1 Over GF(2) 


2 6 -l 


Order of 

Cyclotomic Coset Minimal Polynomial f(x) Degree Index Roots of f(x) 


0 






X < 

► 1 

L 

1 

63 

1 

1 

2 

4 

8 

16 

32 

6 

X 

+ 

x 3 + x 2 + X + 1 

6 

1 

63 

3 

6 

12 

24 

48 

33 

x 6 

+ 

x 5 ♦ x 4 + X 2 + 1 

6 

3 

21 

5 

10 

20 

40 

17 

34 

x 6 

♦ 

x 5 ♦ x 3 + X 2 + 1 

6 

1 

63 

7 

14 

28 

56 

49 

35 

6 

X 

+ 

X 3 ♦ 1 

6 

7 

9 

9 

18 

36 




3 

X 


X ♦ 1 

3 

9 

7 

11 

22 

44 

25 

50 

37 

6 

X 

+ 

X 5 *l 

6 

1 

63 

13 

26 

52 

41 

19 

38 

6 

X 

+ 

X ♦ 1 

6 

1 

63 

15 

30 

60 

57 

51 

39 

x 6 

+ 

X^ + X 2 + X + 1 

6 

3 

21 

21 

42 





X 

+ 

X + 1 

2 

21 

3 

23 

46 

29 

58 

53 

43 

6 

X 

+ 

X^ + X 3 + X ♦ 1 

6 

1 

63 

27 

54 

45 




3 

X 

+ 

X 2 . 1 

3 

9 

7 

31 

62 

61 

59 

55 

47 

6 

X 

+ 

X 3 + X^ + X ♦ 1 

6 

1 

63 
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+ d 
+ d 
+ d 

♦ d 
+ d 

♦ 


110 110] 
0 11111 ] 
0 0 1111 ] 
0 0 110 1 ] 
10 0 111 ] 
0 0 1 0 0 0 ] 
0 0 0 0 0 1 ] 

0 0 0 0 0 0 ] 


The scalar multipliers, d^ through d^, are elements in GF(2). They 
represent unknowns in determining the linearly independent set of polynomials 
(i.e., field elements). In this example, 


dj = d^ = dj = 1 and = d ^ =0 

3 6 33 

The minimal polynomial containing a as a root (as well as Or, . , 0 T J ) 

is 


6 

x 


+ 



4 

x 


+ X 2 + 


1 


3 . . 3 

The order of a (and its conjugates) is 21. Thus, a is a generator of 21 

63 

of the 63 roots of x - 1 3 0 and is a nonpriraitive root of unity. The 
minimal polynomial is, therefore, an irreducible nonprimitive polynomial of 
degree 6 . 


The 21 elements generated by /3« — are tabulated in Table 1-3 where 


£ 6 =£ 5 +/ 3 4 + p 2 + l 


x 3 i 

A one-to-one correspondence exists between)^ and a (see Table 1-1). 
Furthermore, 


„ £(i+j)mod 21 t __ >(J 3(i+ j)mod 63 a a 3i Q 3 j 
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Table 1-3. Elements Generated by 0 , a Root of f(x) * + x^ + x 2 + 1 


i of /?* 


C 5 


c 4 

C 3 

C 2 

c i 

c o 

0 


0 


0 

0 

0 

0 

1 

l 


0 


0 

0 

0 

1 

0 

2 


0 


0 

0 

1 

0 

0 

3 


0 


0 

1 

0 

0 

0 

4 


0 


1 

0 

0 

0 

0 

5 


1 


0 

0 

0 

0 

0 

6 


1 


1 

0 

1 

0 

1 

7 


0 


1 

1 

1 

1 

1 

8 


1 


1 

1 

1 

1 

0 

9 


0 


0 

1 

0 

0 

1 

10 


0 


1 

0 

0 

1 

0 

11 


1 


0 

0 

1 

0 

0 

12 


1 


1 

1 

1 

0 

1 

13 


0 


0 

1 

1 

1 

1 

14 


0 


1 

1 

1 

1 

0 

15 


1 


1 

1 

1 

0 

0 

16 


0 


0 

1 

1 

0 

1 

17 


0 


1 

1 

0 

1 

0 

18 


1 


1 

0 

1 

0 

0 

19 


0 


1 

1 

1 

0 

1 

20 


1 


1 

1 

0 

1 

0 

and the two : 

sets { 0 *} and ] 

la 31 ! 

are 

isomorphic groups 

under the defined 


operation of 

"multiplication." 

However, the 

21 elements generated by 


with 

0 adjoined do_ 

not 

form 

a group 

under the 

defined 

operation 

of 


addition. Clearly 


and 


Z3 6 + 0 5 + /3 4 + 0 2 + l = 0 21 -1 = 0 

x^ + x^ + x^ + x 2 + 1 divides x 2 ^ - 1 
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A fundamental theorem states that x** - 1 divides x n - 1 over any 
field if and only if d divides n. Thus, 

x 2 * - 1 divides x^ 3 - 1 

3 

is another way of stating that the 21 roots of unity generated by 

g 

are among the 63 roots of unity in GF(2 ). 

The roots of 


are the nonzero elements in GF(2 r ). If s divides r, 2 s - 1 divides 
2 r - 1 and 


S -1 
X 


- 1 divides x 


2 


r 


-1 


1 


and the roots of 


2 S -1 


1 - 0 


s r 

are the nonzero elements of the subfields GF(2 ) in GF(2 ). 

6 2 3 

In Example 2, GF(2 ) contains the subfields GF(2 ) and GF(2 )• 

GF(2) is a subfield of GF(2 2 ) and GF(2 3 ) as well as of GF(2 6 ). Although 

the 21 roots of unity with 0 adjoined do not form a finite field (i.e., 21 is 

not of the form 2 s - 1), they contain GF(2), GF(2 ), and GF(2 ). 

Example 3 


21 

The irreducible factors of x - 1 are given in Table 1-4. The set of 
integers 


JiJ - jl, 2, 4, 8, 16, llj 


1-11 


Table 1-4. Irreducible Factora of x 21 - 1 Over GF(2) 


Cyclotomic 

Coset 


Minimal 

Polynomial f(x) 

Degree 

Index 

Order of 
Roots of f(x) 

0 



x + 1 

1 

21 

1 

1 2 

4 8 16 

11 

x^ + x^ + x^ ♦ x 2 ♦ 1 

6 

1 

21 

3 6 

12 


X^ + X + 1 

3 

3 

7 

5 10 

20 19 17 

13 

x^ + x^ ♦ x" + X + 1 

6 

1 

21 

7 14 



}t 2 ♦ X + 1 

2 

7 

3 

9 18 

15 


3 2 . . 

X + X + 1 

3 

3 

7 


taken from the multiplicative group of integers modulo 21 form a subgroup. 
The corresponding set 


(e 1 ) ' {/9. /9 2 . 0 4 . jB 8 . 0 16 . 0 U ) 


are the six distinct roots of 

f(x) * x^ + ♦ x^ + 1 

The index of each of the 21 roots of unity M is relative to 21 , the order 
of (i.e., the generator in Table 1-3). Whereas the index of 

corresponding elements in jtt^J (* subset of the 63 roots of unity) is 
relative to 63, the order of a (i.e., the generator in Table 1-2). 


The number of irreducible polynomials over GF(2) of degree 6 whose roots 
have order 21 is 


<p( 21)/6 - <p(3M7)/6 - 2 

That is, the order of 12 of the 21 roots of unity are relatively prime to 21 
(and, thus, have an index of 1). These elements correspond to two complete 
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cyclotomic cosets with six members each. Each set of elements are roots of a 
minimal, hence irreducible, polynomial of degree 6. 

IT If 

In general, if /3 has order d < 2 - 1 and d divides 2-1 for 

If 

k « r, but does not divide 2-1 for k < r, then j8 is a root of a 
nonprimitive irreducible polynomial over GF(2) of degree r. 


Consider the two polynomials of degree r over GF(2): 

f(x) * x r + b ,x r * * ... + b .x r * ♦ ... + b,x + 1 
r-1 r-i 1 

g(x) ■ x r + b^x r *+...+ bjx r *■ + ... ♦ b f _^x + 1 

The coefficient string of one is the reverse of the other. 
r r 

f(x) * ^ b i xl g(x) " X) b r-i xl 

i“0 i-0 

where bQ and b r are necessarily equal to 1 and 

f(0) * g(0) = 1 

* 

Thus, x * Gt * 0 is not a root of f(x) or g(x)* 

An equivalent expression for g(x) is 

g(x) - X r f(l/x) 

The polynomial g(x) is defined to be the reciprocal polynomial of f(x) and 
vice versa. If a is a root of f(x), then a * (the multiplicative inverse 
of a ) is a root of g(x). 

g(ot 1 ) * a” r f(cO “ 0 
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The transformation 


f(x) «— »x r f(l/x) 

preserves the order of the roots as well as the degree. If a has order n, 
then a 1 ■ a” 1 has order 


n/(n - 1, n) ■ n 

A polynomial f(x) of degree r over GF(2) where 

f(x) * x r f(l/x) 


is defined to be self-reciprocal. 

Example A 

There are a total of nine irreducible polynomials of degree 6 over GF(2) 
(see Table 1-2). 


Six of the nine are primitive and comprised of three reciprocal pairs. 
One such pair of polynomials and their corresponding roots are 


6 S 3 2 

x +x J +x +x*+l 


5 10 rt 20 -40 „17 -34 

a , a , a , a , a , a 


+ x^ + x^ + x + 1 


23 46 -29 58 53 43 

a .a , a , a , a , a 


The multiplicative inverse of each root in one set is contained in the other, 
€*«•» 


(a 5 )' 1 


a " 5 - a 63 ' 5 


.58 


The two nonprimitive polynomials whose roots have order 21 are 
reciprocal polynomials. 


1-14 


The nonprimitive polynomial whose root* have order 9, namely, 


6 3 

x ♦ x ♦ 


1 


is a self-reciprocal polynomial as implied by its corresponding cyclotomic 
coset. (If a is a root, so is a *.) 




9 


14, 28, 56, 49, 35 



7, 


14, 28, -7, -14, 



Reducible self-reciprocal polynomials contain as factors irreducible 

self-reciprocal polynomial(s) and/or irreducible reciprocal pairs of 

S3 n 

polynomials. The factors of x - 1, in particular, and x - 1, in 
general, are examples. Irreducible self-reciprocal polynomials are of even 
degree (r * 2m) with one exception (i.e., x + 1). Their coefficient strings 
are of the following form: 


lb l b 2 - b m-l lb «-l b 2 hi 1 


The coefficients of x^ ra . x m and x^ are 1 and each b. (1 £ i < m) is 0 

* 1 

or 1 (an element of GF(2)). Such a coefficient string is of odd weight (i.e., 
contains an odd number of one's). Thus, the corresponding f(x) cannot contain 
x + l as a factor. Being of even degree and having the foregoing coefficient 
string are necessary, but not sufficient conditions for f(x) to be an 
irreducible self-reciprocal polynomial. 


Assume the cyclotomic coset 


( 1 . 2 . 


2 ®* 1 , 


2 n+1 , 


2 2 m-!) 


corresponds to the roots of a primitive polynomial of degree 2m. To be 
self-reciprocal, the following congruence relationship must hold: 

2® a -1 mod 2 2 ® - 1 
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Applying rul«> of modulo arithmetic yields 


(2* ♦ 1) m 0 mod 2 2b - 1 
(2 a ♦ l)/(2 2 ® - 1) ■ q where q is an 

integer 

and 


(2 m ♦ l)/(2 2m - 1) - 1/ (2 m - 1) 

Thus, 2 2 ® - 1 divides 2™ ♦ 1 only if m ■ 1. It follows that x* ♦ x + 1 

2 -1 

is a self-reciprocal primitive polynomial with roots a and a ■ <J of 
order 3. The only other self-reciprocal primitive polynomial over GF(2) is 
x ♦ 1 whose root is ■ (<P) * ■ 1 of order 1. 

Irreducible nonprimitive self-reciprocal polynomials over GF(2) exist 

for every even degree greater than 2. Given a of order 2 2 ® - 1 in 
2m 

GF(2 ). The cyclotomic coset 

|v, 2v 2®~*v, -v, -2v, ... , -2 nr *vj 

corresponds to the set of 2m distinct roots (which contain a V ) of an 
irreducible self-reciprocal polynomial of degree 2m. 

2 m v s -v mod 2 2 ® - 1 

(2® ♦ 1 ) v s 0 mod 2 2 " - 1 

v m 0 mod (2 2 ® - l)/(2® ♦ 1, 2 2 ® - 1) 

v m 0 mod 2® - l 
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The 2® + 1 solution* are 

v - *(2 m - 1) where 0 S • < 2 m ♦ 1 
and Gt v for each v satisfies 


X 


2®+l 


1 - 0 


The root a V where v ■ 2® - 1 he* order 

(2 2 ™ - l)/(2 m - 1, 2 2 ® - 1) - 2® ♦ 1 

and is a multiplicative generator of the (2 n * l)st roots of unity. Of 
these, <^(2® ♦ 1) have order 2 m + 1, and for m>l , each is a root of one of 
the ^(2® ♦ l)/2m irreducible nonprimitive self-reciprocal polynomials. The 
order of each of the remaining roots divides 2 n + l and is less than 
2® ♦ 1. Those corresponding to a complete coset (i.e., having 2m elements) 
are roots of a degree 2m irreducible nonprimitive self-reciprocal polynomial. 
Those corresponding to cosets containing fewer than 2m elements are roots of 
an irreducible self-reciprocal polynomial whose degree divides 2m and is less 
than 2m. Thus, every factor of 

x 11 - 1 where n ■ 2® ♦ 1 


is an irreducible self-reciprocal polynomial over GF(2). 

Example 5 

Given m ■ i and 2® - 1 ■ 7. The element O 2 is a generator of the 
roots of 


x n - 1 ■ 0 where n * 2® ♦ 1 ■ 9 
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contained in GF(2 6 ). Each of the root* it a root of an irreducible 
salf-reciprocal polynomial whose degree divides 2m - 6. The 9 roots 

y 

represented as v of a are 


(o, 7, 14, 21, 28, 35, 42, 45, 5b} 


Following are the minimal polynomials corresponding to each cyclotomic coset: 


Cyclotomic Coset 

Minim. 1 Polynomial 

0 

x ♦ 1 

7 14 28 56 ( —7 > 49(-14) 35(-28) 

x 6 ♦ x 3 ♦ 1 

21 42(-21) 

x 2 ♦ x ♦ l 


For m • 9 and 2 m - 1 ■ 511, the element a 511 is a generator of the 
roots of x 513 -1-0 contained in GF(2 18 ). Included among these roots 
are the 9 which satisfy 

- 1 - (x ♦ l)(x 2 ♦ x ♦ l)(x 8 ♦ x 3 ♦ 1) - 0 
18 

each of which is member of CF(2 ) and one, and only one, of the subfields 
GF(2), GF(2 2 ), or CF(2 6 ). 

An enumeration of all the factors (i.e. f irreducible self-reciprocal 
513 

polynomials) of x - 1 by order of their roots and their degree is as 
follows; Let » a*** in GP(2*®). The order of /3 d is 

n - 513/(d f 513) where d - 0, 1, , 512 

Those values of d that divide 513 * 3^*19 belong to distinct cyclotomic 
cosets and may be chosen as representatives (refer to Table 1-5). The last 
three entries correspond to factors whose roots are also members of a proper 
subfield of GF(2 ) (as shown in the first portion of this example). 
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Table 1-5. Irreducible Self-Reciprocal Factor* of - 1 Over CF(2) 
Enumerated by the Order of their Root* end their Degree 


d 

Order of 0* in GF(2^) Number of Elements i 

n ■ 513/ (d , 513) in Cyclotomic Coset 

r 

V(n)/r 

1 

513 

18 

18 

3 

171 

18 

6 

9 

57 

18 

2 

19 

27 

18 

1 

27 

19 

18 

1 

57 

9 

6 

l 

171 

3 

2 

l 

513 s 0 i 

nod 513 1 

1 

l 

<P( n)/r denotes 

the number of irreducible self-reciprocal factors 

of 

degree r whose 
order n (i.e., 

roots have order n. 
# h where (h, 513) ■ 

The total number of elements 
d) is equal to <P(n). 

with 


Finite field* of the same order are isomorphic, and every finite field 
i* isomorphic to a Galois field (Reference 5). Thus, the study of finite 
fields of order p r (namely, GF(p r )) where p is a prime integer and r a 
nonzero positive integer. Each element in GF(p r ) is a polynomial of 
degree r with coefficients in GF(p) - i.e., 0, 1. ... , or p - 1. Only 
polynomials in GF(2 r ) are discussed due to considerations associated with 
practical applications. 

Example 6 

3 

Given Y, a root of the degree 3 primitive polynomial x ♦ x ♦ l. 

Thus, Y has order 7 and is a (multiplicative) generator of the nonzero 
elements in GF(2*). 
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Refer to Table* l-l and 1-2. The degree 6 primitive polynomial, 

6 S 2 9 

x ♦ x + x + x + 1, has a whose order is 63 as a root. Thus, a has 

3 

order 7 and is a generator of the nonzero elements in the subfield GF(2 ) 

6 9 

properly contained in GF(2 ). The minimal polynomial containing a and 

9 2 9 4 3 

its conjugates [(a ) and (a ) ] as roots is x + x + 1. 

Refer to Tables 1-3 and 1-4. The element/9— is a root of the 
degree 6 irreducible nonprimitive polynomial x^ + x^ + x^ ♦ + 1. 

The order of /9 is 21. Whereas, /3^ has order 7 and is a generator of the 

3 

nonzero elements of GF(2 ), a proper subset of the 21 roots of unity. 
Furthermore, the minimal polynomial containing (/3^)^ and its conjugates 
1/9 3 and (/9^)^] as roots is x^ + x + 1. 

9 6 

Consider the set of elements generated by X, a , and /3 , 
respectively, with 0 adjoined to each set. 


i of 

r i 


Vl a 0 


j of 

0 ^ 


b 5 \ b 3 b 2 b l b 0 


k of 

/3 k 


C 5 C 4 C 3 C 2 C 1 C 0 


* 

0 

n 

0 

★ 

0 

0 

0 0 

0 

0 

* 

0 

0 

0 

0 0 

0 

0 

0 


l 

0 

0 

0 

0 0 

0 

l 

0 

0 

0 

0 

0 0 

1 

1 

0 

i 

0 

9 

0 

0 

1 1 

0 

1 

6 

1 

1 

0 

1 0 

1 

2 

1 

□ 

0 

18 

1 

1 

0 1 

l 

0 

12 

1 

1 

1 

1 0 

1 

3 

0 

i 

l 

27 

0 

0 

1 1 

0 

0 

18 

1 

1 

0 

1 0 

0 

4 

1 

i 

0 

36 

1 

1 

1 0 

1 

1 

3 

0 

0 

1 

0 0 

0 

5 

1 

i 

1 

45 

l 

1 

1 0 

1 

0 

9 

0 

0 

1 

0 0 

1 

6 

1 

□ 

1 

54 

1 

1 

0 1 

1 

1 

15 

1 

1 

1 

1 0 

0 


Each set of 8 elements is a different representation of the elements in 
3 

GF(2 ). The one-to-one correspondence between elements of each set is 


Y 1 - 


,9i 




i mod 21 
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Multiplication defined on the nonzero elements of each set is as follows: 


yiyj _ y(i + j) 7 

y 7 - 1 = y 3 + r + 1 = o 

a V = a (i+j) mod 63 
a 63 -l = a 6 + a 5 + a 2 + a + 1 = o 

(a 9 ) 7 - l = (a 9 ) 3 + a 9 + l = o 

pipi = mod 21 

p 2 1 - l = + (3 2 + 1 = 0 

(/S 6 ) 7 -l = U/3 3 ) 7 - l] 2 = 0 

(/3 3 ) 7 -i = o 

(/3 6 ) 3 + £ 6 + l = K/3 3 ) 3 + P 3 + l] 2 = o 

(/S 3 ) 3 + £ 3 + l = o 

3 3 2 

The foregoing illustrates that /3 and (p )* are two of the three 

3 7 

conjugate roots of x + x + 1 a divisor of x - 1. 
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SECTION II 


GENERATORS OF PERIODIC BINARY SEQUENCES 
A. FEEDBACK SHIFT REGISTERS 

The Feedback Shift Register (FSR) in Figure 2-1 stores a representation 
of the coefficients of the polynomial 

b 5 a 5 + b 4 a 4 + b 3 a 3 + b^X + b^a + b^ + b Q 

Upon the application of the clock pulse (by clocking circuitry not shown) , the 
FSR performs multiplication by 01, a root of 

6 5 2 

x + x + x + x + 1 = 0 
and reduces the result modulo 

a 6 + a 5 + a 2 + a + 1 

The content of each register stage is shifted one stage to the left. Overflow 
resulting when b^ = 1 prior to shifting, represents 

a 6 = a 5 + a 2 + a + 1 

which is "vector added" over GF(2) to the shifted contents. Equivalently, 

a 6 = a 5 + a 2 + a + i mod a 6 + a 5 + a 2 + a + i 

The contents of the FSR during two successive Clock Pulse Intervals (CPIs) 
(i.e., before and after the applicable of a clock pulse) is illustrated in the 
following example: 
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4 

3 

2 


a 

t 

a 

a 

a 




011011 at CPI j 

110 110 
0 0 0 0 0 0 

110110 at CPI j + 1 


The FSR in Figure 2-1 can assume 2^ or 64 distinct states. The FSR as 
configured splits the state space into two branchless cycles of states where 
distinct states have distinct successor states. One cycle is comprised of 63 
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nonzero states. The succession of these states are identical to those 

appearing in Table 1-1 where the length of the cycle (i.e., its period) is 

★ 

equal to the order of Gt. The all zeros state Q is its own successor 
state* Thus, it is the single member of a cycle of length 1* 

Given a primitive polynomial f(x) over GF(2) of degree r > 2. The 

number of terms in f(x) is necessarily odd (i.e., 2m + 1 where m > 1). The 

FSR circuitry that realizes multiplication by a modulo f(d) splits the state 

space of 2 r binary r-tuples into two disjoint branchless cycles of states* 

One cycle contains 2 r - 1 nonzero states identical in representation and 

r 

sequence of those nonzero elements in GF(2 ) generated by a. The other 
cycle consists of the singleton all zeros state a*. The FSR circuitry is 
comprised of r delay elements (or register stages) and 2ra-l two-input modulo 

2 summers (i.e., Exclusive-OR gates). See References 4 and 6. 

Of particular interest are the binary sequences appearing at the output 
of each register stage. Given the sequence appearing at the output of one 
stage, the output of each of the other stages is a cyclic permutation of that 
sequence. The sequence is termed a Pseudonoise (PN) sequence because of its 
noise-like properties (see Reference 3 and Section IV. A.) 

Consider the primitive polynomial 

6 5 2 

f(x) = X +X + X +X+1 


where 


f(a) « a 6 + a 5 + a 2 + 


a + l = o 


and 



a ♦ a + a + l 
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The FSR in Figure 2-2 performs division by a (i.e., multiplication by a *) 
and reduces the result modulo 


£ S 9 

a + a + a + a + l 

The FSR stores a representation of the coefficients of the polynomial 

5 4 

b + b^a + . • • + bp 

Upon application of a clock pulse, the content of each register stage is 
shifted one stage to the right. Overflow resulting when b^ = 1 prior to 
shifting represents 


-15 4 

a * a + a ♦ a + l 

which is vector added over GF(2) to the shifted contents. In terms of 
congruences 


a " 1 = a 5 ♦ 


a’ + a + i mod cr + 


a 5 + a 2 


+ a + l 


Note that 


-1 -1 63 -1 62 

a = i • a = a = a 



Figure 2-2. Functional Logic Diagram of a Feedback Shift Register that 
Performs Division by a Modulo at** + + Ot^ + a + 1 
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is the last entry in Table 1-1. Successive nonzero states appearing in the 
register of the FSR in Figure 2-2 are in reverse order of those in Table 1-1. 
The binary sequence appearing at the output of a given stage of the FSR in 
Figure 2-2, initialized with a nonzero state, is a PN sequence. It is the 
reverse of the output of the corresponding stage of the FSR in Figure 2-1, 
initialized with the same nonzero state. 

The element f3 9 a * is a root of 

6 5 4 

g(x) a x + x + x +x+l 
where g(x) is the reciprocal polynomial of 

6 5 2 

f ( X ) * X + X + X + X+1 
Thus, an FSR configured to perform multiplication by 

f3 modulo /3 6 + )9 5 + + (3 ♦ 1 

(when initialized with a nonzero state) generates a PN sequence (at the 
output of each stage). This PN sequence is the reverse of the one generated 
by the FSR in Figure 2-1. If the FSR is configured to shift from left to 
right, the states appear in reverse order (of those associated with the FSR in 
Figure 2-1). 

In Example 3, the 6 distinct roots of 

f(x) * x^ + x^ + x 4 + x 2 + 1 

have order 21, and f(x) is irreducible, but nonprimitive. The 21 roots of 
unity generated by /3, a root of f(x), appear in Table 1-3. 
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1 


Given an FSR configured to multiply the representation of 


c 5^ + c 4 B + • * • * c o 

by /3 and reduce the result modulo + /3^ + + 1. The all 

zeros state /3* (representing the constant zero polynomial) is its own 
successor state and lies on a cycle of length 1. Each of the 63 nonzero 
states lies on one of three disjoint cycles (of states) of length 21 (see 
Table 2-1). One cycle corresponds to the 21 elements in Table 1-3 generated 
by ( 3 % a root of 


/ c y n 

f(x) = X + x + x ♦ x +1 

The 63 nonzero states correspond to 63 nonzero polynomials over GF(2) which 
comprise a noncyclic group under polynomial multiplication reduced 
modulo f (/ 3 ) • The remaining two cycles of 21 states correspond to cosets in 
the group of order 63 relative to the subgroup generated by £. The polynomial 

Y m t 3+1 

was arbitrarily selected as one coset leader. Each polynomial in this coset 
is representable asyfi* where 0 < j < 21. The polynomial 

8 = 0 2 + 1 

serves as the other coset leader in a similar manner. Each element in the 
latter coset is representable as 8 p where 0 < k < 21. 

Every polynomial over GF(2) is uniquely expressible except for order as 
the product of powers of irreducible polynomials over GF(2). Irreducible 
polynomials over any finite are building blocks or atoms as are the primes in 
the field of integers of infinite order. 

e l e 2 e n 

f(x) = l f i (x ) ] • [ f 2 (x ) ] * ... ’lf n (x)] 
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Table 2-1. Equal Length FSR Cycles of (nonzero) States Corresponding 
to the Decomposition of a Multiplicative Group into a 
Cyclic Subgroup j /3*\ and Cosets iy/jH and 


of/r 

C 5' 

V 

: 3 « 

V 

5 1 ( 

: o 

j of y/3 J 

C 5' 

V 

£ 3‘ 

V 

c l' 

c o 

k of 8/3 

C 5‘ 

=4’ 

: 3* 

C 2 ( 

c l' 

c 0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

1 

0 

1 

1 

0 

0 

0 

0 

1 

0 

1 

0 

0 

0 

1 

1 

0 

1 

0 

0 

1 

0 

1 

0 

2 

0 

0 

0 

1 

0 

0 

2 

0 

0 

1 

1 

0 

0 

2 

0 

1 

0 

1 

0 

0 

3 

0 

0 

1 

0 

0 

0 

3 

0 

1 

1 

0 

0 

0 

3 

1 

0 

1 

0 

0 

0 

4 

0 

1 

0 

0 

0 

0 

4 

1 

1 

0 

0 

0 

0 

4 

1 

0 

0 

1 

0 

1 

5 

1 

0 

0 

0 

0 

0 

5 

0 

1 

0 

1 

0 

1 

5 

1 

1 

1 

l 

1 

1 

6 

1 

1 

0 

1 

0 

1 

6 

1 

0 

1 

0 

1 

0 

6 

0 

0 

1 

0 

1 

1 

7 

0 

1 

1 

1 

1 

l 

7 

1 

0 

0 

0 

0 

1 

7 

0 

1 

0 

1 

1 

0 

8 

1 

1 

1 

1 

1 

0 

8 

1 

1 

0 

1 

1 

1 

8 

1 

0 

1 

1 

0 

0 

9 

0 

0 

1 

0 

0 

1 

9 

0 

1 

1 

0 

1 

1 

9 

1 

0 

1 

1 

0 

1 

10 

0 

1 

0 

0 

0 

1 

10 

1 

1 

0 

1 

1 

0 

10 

1 

0 

l 

1 

1 

1 

11 

1 

0 

0 

1 

0 

0 

11 

0 

1 

1 

0 

0 

1 

11 

1 

0 

1 

0 

1 

1 

12 

1 

1 

1 

1 

0 

1 

12 

1 

1 

0 

0 

1 

0 

12 

1 

0 

0 

0 

1 

1 

13 

0 

0 

1 

1 

1 

l 

13 

0 

1 

0 

0 

0 

1 

13 

1 

1 

0 

0 

1 

1 

14 

0 

1 

1 

1 

1 

0 

14 

1 

0 

0 

0 

1 

0 

14 

0 

1 

0 

0 

1 

1 

15 

1 

1 

1 

1 

0 

0 

15 

1 

1 

0 

0 

0 

1 

15 

1 

0 

0 

1 

1 

0 

16 

0 

0 

1 

1 

0 

1 

16 

0 

1 

0 

1 

1 

1 

16 

1 

1 

1 

0 

0 

1 

17 

0 

1 

1 

0 

1 

0 

17 

1 

0 

1 

1 

l 

0 

17 

0 

0 

0 

1 

1 

1 

18 

1 

1 

0 

1 

0 

0 

18 

1 

0 

1 

0 

0 

1 

18 

0 

0 

1 

1 

1 

0 

19 

0 

1 

1 

1 

0 

1 

19 

1 

0 

0 

1 

1 

1 

19 

0 

1 

1 

1 

0 

0 

20 

1 

1 

1 

0 

1 

0 

20 

1 

1 

1 

0 

1 

1 

20 

l 

1 

1 

0 

0 

0 



where f^(x) of finite degree is irreducible over GF(2) and the integers 
e^ > 0 (1 < i < n). FSR cycles of states associated with reducible 
polynomials over GF(2) are investigated in the next section. 

B. FEEDBACK SHIFT REGISTERS CHARACTERIZED BY RECURRENCE RELATIONS 

The behavior of the r-stage shift register with linear-logic feedback, 
as shown in Figure 2-3, is characterized by the linear recurrence relation 

r 

a. * y c .a. 
k Lj i k-i 

i*l 


See Reference 3. 

Hereafter, FSRs (as shown in Figures 2-1 and 2-2) will be called shift 
registers with interstage feedback or ISFSRs. Whereas, those shown in 
Figure 2-3 will be referred to as shift registers with single stage feedback 
or SSFSRs. 

The summation in the linear recurrence relation is to be considered a 
modulo 2 summation throughout. The content of the i ^ stage at CPI k is 
denoted by a... Shifting is implied by the subscripts. The content of the 

K— 1 , 

i stage at CPI k becomes the content of the (i + 1) stage at CPI k + 1. 
That is, 


a, a,, .v ( . - v l<i<r 

k-i (k+1 )-( l+l ) - 

The c^'s are Boolean constant multipliers. The i th stage contributes to the 
feedback if c^ * 1. The r ^ stage is necessarily connected to the feedback 
(switching) network (i.e., c^ “ 1). Otherwise, the FSR is using a shift 
register comprised of less than r stages. The initial state of the 
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°k-l a k-2 °k-r+l C k-r 



Figure 2-3, Functional Logic Diagram of an r-stage Shift Register 
with Linear Logic Feedback (SSFSR) 

i C ^ stage is denoted by a_ . (i.e., a,, at CPI k ■ 0). The bit being 
fed back at CPI k is denoted by a^ and a k becomes the content of the 
l 8t stage at CPI k + 1. 

a k~ * a (k+l)-l 


Given 


G(x ) 


z 


k 

a k x = 



k 

x 
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a generating function where th'. sequence of feedback bits are coefficients of 
ascending powers of x. Then, 


G(x) 


r oo 

S i V' k-i 

v L,Vi x 


i"l k"0 


and 


G(x> ~ yy 


i-1 


oc 


-1 “ 1+1 
a.x + a . . x + ... +a 

-i --+1 




V 


k*0 


Thus, 


(■ -td 


G(x) 


L c i xi 


i-t 


-i . -i+1 . -1 

a.x + a . ,x + ... + a ,x 

-l -l+l -1 


and 


««> • fey 


The numerator 


g (x> - y^c.x 1 


i-1 


-i A -i+1 ^ -1 

a.x + a . . ,x + ... + a ,x 

-l -l+l -1 


is of degree less than r and its form is dependent upon the initial state of 

the FSR (a_^, *_2 a_ f ) end the feedback connections (c^, c ^ * c f ). 

Whereas the denominator 
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£(x) 


1 - 


C .X 


i"l 


1+7 c.x 

I-l 


(since -1=1 mod 2) is of degree r (i.e., * 1) and its form is dependent 

upon the feedback connections only . Clearly, g(x) and f(x) are polynomials 
over GF(2). 

The polynomial f(x) is called the characteristic polynomial of the 
SSFSR. The behavior of the SSFSR can be described by the periodic sequence 
|a^| corresponding to a given initial state. Overlapping r-uit subsequences 
of { a^ | as seen when {a^| i» hit serially passed through an r-bit window, 
correspond to the state sequence (i.e., cycle of states) assumed by the 
register portion of the SSFSR. 

The period of the longest sequence is governed by the properties of 
f(x). Given the initial state of the SSFSR in Figure 2-3 

a . ■ a „ ■ ... * a .. * 0, a * 1 

-1 -2 -r*l -r 


Then, g(x) ■ 1 and 


G(x) 


1 

ffxl 
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Since Che SSFSR can only assume a finite number of acacea before 
repeating, the aequence 

KM*o • *i ••• \-i} 

must have a finite period A < 2 r . Thus, 

G <*) * F(xJ * a o * a i x + ••• + *j£-i x 1 

♦ x*^ (sq + a^x ♦ ... * a^_^X^ 

2i jJ— i 

+ x («q + i,x + ••• * a j2-l x ^ 

, mA , A A i-lx 

♦ x ( Sq ♦ a^x ♦ ... ♦ 1 


0-1 

*0 + a l x * •“ + a £-l x 

1 - x^ 


and f(x) divided 1-x-^ for some least integer value A, the periodicity of 
|a^|. Conversely, if f(x) divided 1-x - ^ for some least value of A, then 
f(x) characterizes an SSFSR that generates a periodic sequence of length .£ 
when initialized by the state 00 , ... , 01. Following Reference 3 

1 - x^ 0-1 

HxT * y o + n x + ”• + 
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for some least integer value J2. Then, 


1 *0 + V + **' " y i-l x ‘ 

fTxT = 


i-i 


- ^ 


1 - X 


= (1 + x"^ * + ... + x mi + . . . ) (y^ + y^x + ... + y^_^x^ ^ ) 


oo 

= G(x) =^a k x l 
k=0 


Equating coefficients of like powers of x gives j } = | } 

Example 8 


Given the linear recurrence relation 

a k = a k-2 + a k-3 

and the initial conditions a_^ - = 0 and a _3 = 1* The linear 

recurrence relation of order 3 (a discrete analog of a linear differential 
equation of degree 3 with constant coefficients) with three boundary values 
(i.e., initial conditions) provides sufficient information to compute 

2 

a^, a^ # ... . The same information can be extracted from f(x) = 1 + x + x 
as follows: 
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2 3 

1 + x Z + x J + 


2 3 U 7 , 2 

1+x+x + x + x U + x + 


2 3 

1 + x+x 

2 3 

X + X 


4 5 

+ x + x 


3 4 5 

X + X + X 


+ X + X 


+ X 


+ X 6 + X 7 


X 7 + 


and 


{%} = {l. 0, 1, 1 , l, 0, o} 

The importance of f(x) is that its properties provide information about 
periodicity of {a^} without the necessity of determining the components 
|a^. Note that f(x) divides 1 - x^ and is a primitive polynomial over 
GF(2) of degree 3. 

It will be shown that an r-stage SSFSR and an r-stage ISFSR having 
identical cycle structures are transformationally equivalent. An isomorphism 
exists between the states of one and the other. 



The generating function of an SSFSR lends itself to readily determining 
the cycle length for a given initial state, especially when f(x) is 
reducible. Consider the generating function 


G(x) 


g(x) 

hTxTsTxT 
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associated with an r-stage SSFSR whose initial state is nonzero. The 
characteristic polynomial, f(x), is of degree r and has distinct irreducible 
factors h(x) and s(x) whose degree exceeds 0. An initial state corresponding 
to a g(x ) that has no common factor (of degree greater than 0) with f(x) lies 
on a cycle of longest length. That is, 

(g(x), f(x)) = (g(x), (h(x)s(x))) = 1 

denoting that the greatest common divisor polynomial is 1, the nonzero 
constant polynomial. The initial state 00 ... 01 corresponding to 

g(x) = 1 always lies on a cycle of longest length. By partial fraction 
expansion 


G(x) 


1 

h(x)s(x) 


u(x) v(x) 
h(x) s(x) 


and 


u(x)s(x) + v(x)h(x) = 1 

Unique solutions exist for u(x) and v(x) in the congruential forms 

u(x)s(x) = 1 mod h(x) 
v(x)h(x) = 1 mod s(x) 

from finite field theory (see Reference 4). Since u(x) is of degree lower 
than that of h(x) (an irreducible polynomial), 

(u(x) , h(x)) * 1 


Similarly, 


((v(x), s (x ) ) = 1 
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The coefficients of ascending powers of x of the generating function 


G(x) 


u(x) v(x) 
h(x) s(x) 


has two components. Its period is the Least Common Multiple (LCM) of the 

A 

periods of the two components. Thus, if h(x) divides 1 - x 1, and s(x) 
divides 1 - x 2 (for least integer values of JL\ and J? 2 , respectively), then 


f(x~* ~ h(x)s(x) divides 1 


-J 


for the least integer value 


J? = LCM(j2p i 2 ) 

Example 9 

Given a i even-stage SSFSR with a characteristic polynomial 

3 4 7 

f(x) = 1 + x + x + x + x 

2 3 2 3 4 

= (1 + x +x)(l+x+x + x + x ) 

Corresponding to the initialization of 0000001 is the generating function 

G(x) = = 3 4 7 

f ( X ) 1 + x + x + x + x 

_ 1 

2 3 2 3 4 

( 1 +x + x) (1 + x + x + x + x) 

u(x) v(x) 

2 3 2 3 4 

1 + x + x 1 + x + x + x + x 
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Thus, 


U ( X ) (1 + X + X 2 + + x 4 ) + v(x) (1 + X 2 + x^) = 1 

and 

u(x) (x 4 + x“* + x 2 + x + 1) s 1 mod (x^ + x 2 + 1) 
u(x) (x 2 + 1) = 1 mod (x^ + x 2 + 1) 

Also, 

v(x) (x^ + x 2 + 1) = 1 mod (x 4 + x^ + x 2 + x + 1) 

3 

The polynomial u(a) is an element in GF (2 ) whose multiplicative generator 
is a, a root of 

h(x) = x 3 + x 2 + 1 

3 2 

a primitive polynomial. The multiplicative inverse modulo x + x + 1 of 

(x 2 + i)^-^(a 2 + 1) is u(x)-*-*- u(a) 

Since 

7 2 3 

a = 1 and a + 1 = CX 

u(a) = a 4 = a 2 + a + l 


and 


u ( x ) 


1 + X + X 
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The polynomial v(/3) is an element in GF(2^). Multiplication of polynomials 
in the field is reduced modulo 

s(fi) * (ft** ♦ + fi^ + /3 + l)-*—**(x^ +x^+x^+x+l)=s(x) 

Since s(x) is a nonprimitive irreducible polynomial, its root fi is not a 

4 

multiplicative generator (of the nonzero elements) in GF(2 ), i.e., 

/3 5 - 1. It may be shown that f3 + 1 is one of <p(15) = 8 multiplicative 
generators in GF(2^) where )3 is a root of 

,,432 

s(x) = X + X +X + X + 1 


as follows: 


i of (/3 + l) 1 C 3 C 2 C 1 C 0 i of (/? + l) 1 


0 

0 

0 

0 

1 

8 

1 

0 

0 

1 

l 

0 

0 

1 

1 

9 

0 

1 

0 

0 

2 

0 

1 

0 

1 

10 

1 

1 

0 

0 

3 

1 

1 

1 

1 

11 

1 

0 

1 

1 

4 

1 

1 

1 

0 

12 

0 

0 

1 

0 

5 

1 

1 

0 

1 

13 

0 

1 

1 

0 

6 

1 

0 

0 

0 

14 

1 

0 

1 

0 

7 

0 

1 

1 

1 







The nonzero polynomials in GF(2 ) are expressible as 


C 3 /3^ + + Cj/3 l + c Q * (/3 + 1)* mod ^ + /3 3 + /3 2 + (3 + 1 


The multiplicative inverse modulo + x^ + + x + 1 of 


(X 3 + x^ + I)-*-*-/? 3 + /3^ + 1 is v(x)-»-*-v(/3) 
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Since 


and 


(£+ l) 15 = 1 and/3 3 + $ 2 + 1 = (£ + l) 5 
v()8) - (/3+ l) 10 = £ 3 + / 3 2 
v(x) = X^ + X^ 


A version of Euclid's method which is recursive and detailed in Reference 4 is 
recommended for determining multiplicative inverses in finite fields of higher 
order. 


The partial fraction expansion is, thus, complete and 


G(x) 


g(x) _ 1 

3 4 7 

f(x) 1 + x + x + x + x 


2 2 3 

1 + x + x x + x 

2 3 T 2 3 4 

1 + x + X 1 + X + X + X + x 

_ u(x) y(x) 
h(x) s(x) 

The seven-stage SSFSR may be viewed as being decomposed into a three-stage and 
a four-stage SSFSR. Its state behavior can be determined from the linear 
recurrence relation 


a. = a. . + a, 0 + a. . + a. _ 
k k-1 k-3 k-4 k-7 


with the initial conditions 


a , =■ a „ = ... - a _ 6 = 0 , a _ 7 * 1 


-1 -2 


2-19 



and a 


corresponding to g(x) = 1. Successive states a k-2 *** a k-7 

are tabulated in Table 2-2 for the cycle of states containing the initial state 
0 0 , ... , 0 1. Its generating function is 


3 5 j 

1 +x + x + x ♦ x 

The state behavior of the 3-stage SSFSR is described by 

b k = b k-2 + b k-3 

Its generating function, the first term of partial fraction expansion of G(x), 
is 


u(x) _ 1 + x + 
h(x ) 1 + x 1 2 + x 3 


The initial state is determined as follows: 


Thus , 


b_2 + b_^x 


+ b^ + ^_2 X + ^-i x 

2 

= 1 + x + x = u(x) 


b -i = 1 


1 + b - 2 - i 

b _ 2 =0 


0 + b _ 3 = 1 
b -3 = 1 


Successive states b^_^ b^ ^^-3 anc * ^ appear in Table 2-2 for b_^ 
b _2 *101, Since its characteristic polynomial h(x) is of degree 3 

and primitive, the periodicity of |b^| is 2 3 - 1 or 7 and » b^ ^ 
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Table 2-2. State Table of a 7-Stage SSFSR and Components of a Decomposition for 





f(x) ■ 

■ 1 

+ X 

+ X 

? ♦ X 

* ♦ 

7 . 

X 

- (1 

+ x 2 

+ x 3 

)(1 + 

X + 

X 2 + 

3 . 

X + » 

k 

V 

! a k- 

*2 a k- 

■ 3 V 


_5 a k- 

‘6 a k-i 

[ a k 

b k 

-l b k: 



V 

iV 

lA; 

•3 d k~4 d k 

V d k 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

1 

1 

0 

1 

0 

0 

1 

1 

l 

0 

0 

0 

0 

0 

u 

1 

1 

1 

0 

1 

0 

1 

0 

1 

0 

1 

2 

1 

1 

0 

0 

0 

0 

0 

1 

1 

1 

1 

0 

0 

0 

1 

0 

1 

1 

3 

1 

1 

1 

0 

0 

0 

0 

0 

0 

1 

1 

0 

1 

0 

0 

1 

0 

0 

4 

0 

1 

1 

1 

0 

0 

0 

0 

0 

0 

1 

1 


1 

0 

0 

1_ 

0 

5 

0 

0 

1 

1 

1 

0 

0 

0 

1 

0 

0 

0 

1 

0 

1 

0 

0 

0 

6 

0 

0 

0 

1 

1 

1 

0 

1 

0_ 

1 

0 

1 

0 

1 

0 

1 

0 

1 

7 

1 

0 

0 

0 

1 

1 

1 

0 

1 

0 

1 

1 

0 

0 

1 

0 

1 

0 

8 

0 

1 

0 

0 

0 

1 

1 

1 

1 

1 

0 

1 

1 

0 

0 

1 

0 

i 

9 

1 

0 

1 

0 

0 

0 

1 

1 

1 

1 

1 

0 

0 

1 

0 

0 

1 

1 

10 

1 

1 

0 

1 

0 

0 

0 

0 

0 

1 

1 

0 

1 

0 

1 

0 

0 

0 

11 

0 

1 

1 

0 

1 

0 

0 

1 

0 

0 

1 

1 

0 

1 

0 

1 

0 

1 

12 

1 

0 

1 

1 

0 

1 

0 

1 

0 

0 

0 

0 

0 

1 

0 

0 

1 

1 

13 

1 

1 

0 

1 

1 

0 

1 

1 

0_ 

1 

__0 

l 

1 

0 

0 

1 

0 

1 

14 

1 

1 

1 

0 

1 

1 

0 

0 

1 

0 

1 

i 

0_ 

1 

0 

0 

1 

0 

15 

0 

1 

1 

1 

0 

1 

1 

1 

1 

1 

0 

1 

1 

0 

1 

0 

0 

1 

16 

1 

0 

l 

1 

1 

0 

1 

0 

1 

1 

1 

0 

0 

1 

0 

1 

0 

0 

17 

0 

1 

0 

1 

1 

1 

0 

1 

0 

1 

1 

0 

0 

0 

1 

0 

1 

1 

18 

1 

0 

1 

0 

1 

1 

1 

1 

0 

0 

1 

1 

1 

0 

0 

1 

0 

1 

19 

1 

1 

0 

1 

0 

1 

1 

1 

1 

0 

0 

0 

0 

1 

0 

__0 

1 

1 

20 

1 

1 

1 

0 

1 

0 

1 

1 

0_ 

1 

0 

1 

1 

0 

1 

0 

0 

1 

21 

1 

1 

1 

1 

0 

1 

0 

1 

1 

0 

1 

1 

0 

1 

0 

1 

0 

1 

22 

1 

1 

1 

1 

1 

0 

1 

0 

1 

1 

0 

1 

0 

0 

\ 

0 

1 

0 

23 

0 

1 


1 

1 

1 

0 

0 

1 

1 

1 

0 

1 

0 

0 

1 

0 

0 

24 

0 

0 

1 

1 

1 

1 

1 

1 

0 

1 

1 

0 

0 

1 

0 

0 

l 

1 

25 

1 

0 

0 

1 

1 

1 

1 

1 

0 

0 

1 

1 

1 

0 

1 

0 

0 

1 

26 

1 

1 

0 

0 

1 

1 

1 

0 

1 

0 

0 

0 

0 

1 

0 

1 

0 

0 

27 

0 

1 

1 

0 

0 

1 

1 

0 

0_ 

1 

_0 

1 

0 

0 

1 

0 

1 

0 

28 

0 

0 

1 

1 

0 

0 

1 

1 

1 

0 

1 

1 

1 

0 

0 

1 

0 

1 

29 

1 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

1 

0 

1 

0 

0 

l 

0 

30 

0 

1 

0 

0 

1 

1 

0 

0 

1 

1 

1 

0 

1 

0 

1 

0 

0 

0 

31 

0 

0 

1 

0 

0 

1 

1 

0 

0 

1 

1 

0 

0 

1 

0 

1 

0 

0 

32 

0 

0 

0 

1 

0 

0 

1 

0 

0 

0 

1 

1 

0 

0 

1 

0 

1 

0 

33 

0 

0 

0 

0 

1 

0 

0 

0 

1 

0 

0 

0 

1 

0 

0 

1 

0 

0 

34 

0 

0 

0 

0 

0 

1 

0 

0 

0_ 

1 

0 

1 

0 

1 

0 

0 

l 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

1 

1 

0 

1 

0 

0 

0 
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The behavior of the 4-stage SSFSR is described by 


d k ‘ d k-l * d k-2 * d k-3 * d k-4 

1 1 8 generating function, the second term of the partial fraction expansion of 
G(x), is 


, , 2 a 3 

vCx) u x ♦ x 

/ \ i 2 3 4 

s(x) 1 + x + x + x + x 

The feedback connections and the initial state uniquely determines v(x). 


-1 

+ d _ 2 + d -l x 


+ d _ 3 + d^^x + d_^x 


2 3 

+ d / +d 0 x + d o x + d * x 
-4 -3 -1 

2 A 3 

8 x + x 


v(x) 


and * 1 0 1 0. Successive states d i c .| d ^_2 d k-3 d k-4 and d k a PP ear 

in Table 2-2 with the foregoing initial state. The characteristic polynomial 

s(x) is of degree 4. It is a nonprimitive irreducible polynomial whose roots 

have order 5, a divisor of 2 - 1. Equivalently, s(x) divides 1 - x for 

the least integer value A of 5. The periodicity of jd^} thus, 5 and 

d. . - d.. .. 

k-i 5k-i 

As shown in Table 2-2 


M-kMU 
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and Ja k | has period 35, the LCM of 7 (the period of {b^p and 5 (the 
period of jd^p. The LCM of two nonnegative integers a and b is 


la ’ bl * TaTbT * ♦ b >0 

Two meshed gears, one with seven teeth (corresponding to the period of jb^}) 
and one with five teeth corresponding to the period of jd^}, re P resent a 
mechanical analog of the decomposed SSFSRs. A scribe line, joining the 
centers of the gears before drive is applied to one, corresponds to the 
initial state* Upon the application of drive, the scribe line of the 
respective gears rotate (in opposite directions)* Both scribe lines will 
simultaneously first return to their original positions after the number of 
distinct pairs of teeth that have passed through the point of contact is 
[7, 5] * 35. Equivalently, 

f(x) * 1 ♦ x + + x 7 divides 1 - x^ 


for the least value of Jl equal to 35, and the period of {a^} ** 35* The 
order of the roots of h(x), s(x), and f(x) is, respectively 

a 7 - 1, /9 5 - 1 and 8 35 - 1 

where h(a) ■ s(/3) * f(8) * 0 

Given 


f(x) - 


n 


f.(x) 
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where each factor f^(x) is an irreducible polynomial of degree r^ > 0 over 

GF(2) and f.(x) f* f.(x) for i t j. An irreducible polynomial f.(x) is 
1 J jg. 1 

said to “belong to exponent jZ/* if f^(x) divides 1 - x 1 but does not 

divide 1 - x S for s < Also, i. is the order of a. where 

i i i 

f . ( a ) - o. 

i 


The “period of f(x)“ is 


x » * • • » 

the LCM of the exponents to which the distinct irreducible factors belong. 

Every irreducible polynomial over GF(2) of degree r < 16 can be 

determined from Table C.2 in Appendix C of Reference 6. The table contains a 

partial list of irreducible polynomials for 16 < r < 34 where factors of 
2 r -] 

x - 1 belonging to all possible exponents are given. The octal equivalent 
of the binary coefficient string represents each polynomial. Associated with 
each polynomial is an integer power (corresponding to an element of a 
cyclotomic coset) of a, a root of the first entry, a primitive polynomial with 
a minimum number of terms. Each polynomial listed is the minimal polynomial 
of the roots corresponding to a cyclotomic coset represented by the element of 
least value. See Table 1-2 of this report, but note that the primitive 
polynomial whose root is a (corresponding to 1 in the coset jl, 2, 4, 3 , 16, 32f) 
differs from the one given in Reference 6. In Reference 6, only one of a pair 
of reciprocal polynomials is listed. The order of the roots of a listed 
polynomial (i.e., the exponent to which the polynomial belongs) must be 
computed as shown in Section I. 

Every irreducible polynomial over GF(2) through degree 19 can be 
determined from Reference 7. As in Reference 6, an octal representation is 
used for each irreducible polynomial. The octal representations are arranged 
lexicographically, and the period of each listed polynomial is given. Only 
the lower-valued octal representation of a reciprocal pair of polynomials is 
listed. The table enables one to readily determine whether a given polynomial 
is irreducible. 
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Reference 8 lists one primitive polynomial over GF(2) with the minimum 
possible number of terms for every degree through 168. Another list where the 
numbers of terms is not, in general, a minimum appears in Reference 9 for 
every degree through 100. 

A method of deriving every primitive polynomial of degree r from a given 
r C ^ degree primitive polynomial appears in Reference 10. Also presented is 
an outline of an approach to the much more difficult problem of synthesizing a 
primitive polynomial. 

Example 9 is illustrative of the relationship between the period of f(x) 
and the exponents to which its distinct irreducible factors belong. The 
period of f(x) corresponds to the period of the longest cycle(s) of states. 

By initializing the SSFSR with a state corresponding to a g(x) that has a 
factor in common with f(x), a minor cycle is generated. 

Example 10 

Consider the 7-stage SSFSR in Example 9. An initial state corresponding 
to 


g(x) = s(x) 


2.3 

+ X + X + X 


4 

+ X 


results in 


G(x) - 


s(x) m 1_ 

h(x ) s (x ) 1 ♦ x 2 + x 3 


and a sequence | a, \ whose period is length 7. F 


rom 


a k “ Vl * a k-3 + V4 + a k-7 
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* a „7 is determined as follows: 
a -i 

2 

♦ a^ ♦ a^* ♦ a_^x 

2 3 

♦ a , ♦ a 0 x 4 a 0 x ♦ a -x 

-4 -3 -2 -1 

2 3 4 5 6 

♦ a.+a^x + a-x + a ,x ♦ a -x ♦ a „x *► a ,x 

-7 ”6 -5 -4 -3 -2 -l 

2 3 4 

* 1 + x ♦ x + x + x 


“ g(x) 


-1 




-6 


0 , 


“-3 


-4 


’-5 


-7 


ana the states a^i a k ^2 


3^7 and ja^lversus k are 


k 

Vl 

V2 

a k-3 

a k-4 

a k-S 

a k-6 

a k-7 

a k 

0 

0 

0 

1 

1 

1 

0 

l 

1 

i 

1 

0 

0 

1 

1 

1 

0 

0 

2 

0 

1 

0 

0 

l 

1 

1 

I 

3 

1 

0 

1 

c 

0 

1 

1 

1 

4 

1 

1 

0 

l 

0 

0 

1 

1 

5 

1 

1 

1 

0 

1 

0 

0 

0 

6 

0 

1 

1 


0 

1 

0 

l 

0 

0 

0 

l 

1 

1 

0 

1 

1 


It may be verified that the successive states under any 3 adjacent columns 
correspond to those generated by a 3-stage SSFSR described by the linear 
recurrence relationship 


a k-2 * a k-3 
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and appropriately initialized. In particular, a^_^ a k-2 a k-3 w ^ ere 
a -l a -2 a -3 = 0 0 1 mimics the 3-stage SSFSR whose generating function is 


G(x) 


1 + x‘ 


+ 


3 

x 


Refer to Table 2-3. Each of the states in the foregoing length 7 cycle is 
treated as an initial state and mapped onto its corresponding g(x). Each g(x) 
is nonzero, of degree 6 or less, and contains 

sCx) = 1 + x + x + x +x 

as a factor. The remaining factor g"(x) for each g(x) must be nonzero and of 
degree 2 or less. There are a total of 7 such'g(x) , s where 

a, x 2 

g ( x) - c 2 x + CjX + C Q 

and at least one of the three coefficients is nonzero. Each of the 7 states 
in the length 7 cycle (when used as an initial state) yields 

>v 2 3 

C(x) = x x- where (g(x), 1 + x + x) = l 

1 + x + x 

It can then be concluded that the 7-stage SSFSR generates one, and only one, 
cycle of length 7. 

An initial state corresponding to 

g(x) = "g(x)h(x) =< g(x)(l + x^ + x^) 


results in 


■g(x)h(x) "g(x) 

= x 3 4 

h(x)s(x) 1+x+x +x + x 
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Table 2-3. Initial States of a 7-Stage SSFSR that Map onto a 

4 3 2 

g(x) Containing x + x + x + x + 1 as a Factor 


Initial State 


g(x) 


a -l 

a -2 

a -3 

a -4 

a -5 

a -6 

a -7 

6 

X 

1 

x' 

j 4 

X 

3 

X 

2 

X 

X 

1 

g(x) 

= 

g(x)(x^ 

4 

3 

X 

+ 

2 

X 

+ 

X 

+ 

l) 

0 

0 

1 

1 

1 

0 

1 

0 

0 

1 

1 

1 

1 

1 

( 



1)(X 4 

+ 

3 

X 

+ 

2 

X 

+ 

X 

+ 

l) 

1 

0 

0 

l 

1 

1 

0 

1 

0 

0 

0 

0 

1 

0 

(x + 

X 


)(x 4 

4 

3 

X 

+ 

2 

X 

+ 

X 

4 

l) 

0 

1 

0 

0 

1 

1 

1 

0 

l 

0 

0 

0 

0 

1 

( 

X 

4 

l)(x 4 

4 

3 

X 

+ 

2 

X 

+ 

X 

4 

l) 

1 

0 

1 

0 

0 

1 

1 

1 

0 

l 

1 

1 

0 

1 

(x 2 + 

X 

4 

l)(x 4 

4 

3 

X 

+ 

2 

X 

+ 

X 

4 

l) 

1 

1 

0 

1 

0 

0 

1 

1 

1 

0 

0 

0 

1 

1 

(X 2 


4 

l)(x 4 

4 

3 

X 

+ 

2 

X 

4 

X 

4 

l) 

1 

i 

1 

0 

1 

0 

0 

1 

1 

1 

1 

1 

0 

0 

(X 2 



)(x 4 

4 

3 

X 

+ 

2 

X 

4 

X 

4 

l) 

0 

l 

1 

1 

0 

1 

0 

0 

1 

1 

1 

1 

1 

0 

( 

X 


)(X 4 

4 

3 

X 

+ 

2 

X 

4- 

X 

4 

l) 

Characteristic Polynomial 

f (x) 

* (1 

+ 

2 

X 

4 

X 3 )(l 

+ X + 

■ 3 

-2 

♦ X 3 < 

■ > 

: 4 ) 








Since g(x) is of degree 6 or less, gXx) is of degree 3 or less and 

Cg(x), + x 3 + x 2 + x + 1) = 1 

There are 15 nonzero initial states corresponding to 

3 2 3 2 

g( x ) * (c^x + c 2 x + c^x + Cq ) C x + x + 1) 

where at least one c^ is nonzero. A simplified approach to determining one 
initial state is as follows: 


k 

Vi 

\- 

2 \-3 a k-4 a k- 

5 V 

6 a k-7 

a k 

0 

0 

0 

0 1 1 - 

- 

- 

1 

1 

i 

0 

0 0 | 1 

- 

- 

i 

2 

i 

1 

0 0 | 0 

1 

- 

0 

3 

0 

1 

1 0 | 0 

0 

1 

0 




• • 

• * 

* • 





( 
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Embedded in the left four stages is the state-behavior of a 4-stage SSFSR 
whose generating function is 


G(x) 


1 


+ X + X + X 


4 

X 


Furthermore, 


a k = 

a k-l 

+ 

a k-2 

+ a k-3 

+ 

a k-4 

7 r 

ii 

Vi 

+ 

a k-3 

+ a k-4 

4 * 

a k-7 


and 


\-7 ~ a k-2 

is sufficient information to fill in the dashed entries. 

One cycle of length 7 and 3 cycles of length 5 accounts for 22 states. 
Each of the states, when viewed as an initial state, maps onto a g(x) where 

(g(x), f(x)) = x^ + x^ + x^ + x + 1 or x^ + x^ + 1 

The all zeros state maps onto g(x) = 0 and 

(0, f(x)) = f(x) 


corresponds to 


G(x) = Tc^T = I = 0 " M 
8 

with periodicity 1. The remaining 105 (2 - 23) distinct nonzero states 

when viewed as initial scates map onto 105 distinct g(x)'s. The greatest 
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common divisor of each g(x) and 


f(x) * h(x)s(x) = l + x + x J + x +x / 

is 1* Each of the 105 states is contained in one and only one cycle of length 
35. The number of length 35 cycles is 7. The cycle structure of the SSFSR is 
summarized as follows: 


Length of 
Cycle 

Number of 
Cycle(s) 

Number of 
States 

1 

1 

1 

5 

3 

15 

7 

1 

7 

35 

7 

105 



Total 128 


Given that 


f(x) = [s(x)] e 


where the integer e > 1 


The length of the longest cycle is the least integer value JL for which 

[s(x)] e divides 1 - x^ 


The exponent to which s(x) belongs is JL ^ and 


s(x) divides 1 - 
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Also, 


and 


[s(x)] e divides 


(‘ 



e 


(* 

for integer values i > 0. 



The period of [s(x)] 


over GF(2) 
e is thus 


1 - 



1 


where 2 1 *<e< 2* 

Example 11 

Given a 9-stage SSFSR characterized by 

f ( x ) = [s(x)] e = (1 + X 2 + x'*)'* 
The period of the s(x) is 7, 

Since 

2 < 3 < 2 2 


2 

f(x) has period 2 • 7 = 28 and the length of the longest cycle that the 

9-stage SSFSR can generate is 28. Every state that maps onto a g(x) such that 

(g(x), (s(x)] 3 ) = 1 
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is contained in a cycle of length 28. Every state that maps onto a g(x) such 
that 


(g(x), (s(x)] 3 ) = s ( x ) 

is contained in a cycle of length 2*7 = 14. Every state that maps onto a 
g(x) such that 


(g(x), (s(x)] 3 ) - [s(x)] 2 

is contained in a cycle of length 7. The all zeros state maps onto g(x) = 0 
and 


(0, [s(x)] 3 > - [s(x)] 3 

Thus, the all zeros state comprises a cycle of length 1. 


An SSFSR characterized by 


LI ^ 

f ( x ) - Y\ j e. > 1 


where f^(x) has period when initialized with the state 0 0 , 0 1 

generates a cycle of longest length 


i 


(2 L Jl i , 2 


V 


i .-1 i . 

where 2 ^ < e^ < 2 ^ and the length of every cycle divides J0, the length 

of the longest cycle. 
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SECTION III 


AN ISOMORPHISM BETWEEN THE STATES OF AN r-STAGE SSFSR AND AN r-STAGE ISFSR 


The sequence j } 
recurrence relation 


emanating from a 4-stage SSFSR satisfies the linear 


a k = Vl + a k-2 + \-4 


( 1 ) 


The characteristic polynomial of (1) is 


f (x ) = (1 + X + X 2 + X^) = (1 + X ) ( 1 + x 2 + x^) 


( 2 ) 


The cycles of states and the corresponding |a^J are tabulated in Table 3-1. 
Each state in a cycle may be viewed as an initial state that maps onto a 
g(x). The coefficients of g(x) are linear functions of a_^, > a _3 


and a , as follows: 
-4 


M 


+ a 


+ a 


+ a_ 1 x 

1 2 3 

+ a_2 x + a _2 x + a -i x 


2 3 

g (x ) = (a_^ + a_ 2 + a_^) + (a_^ + a_^ x + a _ 2 x + a -l x 


(3) 


The coefficients of g(x) are evaluated for each of the 16 states (when viewed 
as an initial state) on the right side of Table 3-1. It may be noted by 
inspection that distinct states map onto distinct g(x)'s. Thus, a one-to-one 
correspondence exists between the 16 possible (initial) states and the 16 
distinct g(x)'s. The states comprise a vector space over GF(2) of dimension 4 
(see References 1 and 5). The linearly independent unit vectors form a 
natural basis and map onto g(x)'s in accordance with (3). 
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Table 3-1. The One-to-One Correspondence Between the States of 
an SSFSR and the g(x) Polynomials 


g(x) 


k 

V 1 

a k-2 

V 

3 a k-4 

a k 

3 

X 

2 

X 

X 

l 

0 

0 

0 

0 

0 

0 

x* 0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

x* 0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

l 0 

0 

0 

1 

1 

1 

0 

0 

0 

1 

x 6 1 

0 

1 

1 

2 

1 

1 

0 

0 

0 

x 5 1 

1 

1 

0 

3 

0 

1 

1 

0 

1 

X 4 0 

1 

1 

1 

4 

1 

0 

1 

1 

0 

x 3 1 

0 

0 

0 

5 

0 

1 

0 

1 

0 

X 2 0 

1 

0 

0 

6 

0 

0 

1 

0 

0 

x 0 

0 

1 

0 

0 

0 

0 

0 

1 

1 

1 0 

0 

0 

1 

0 

1 

1 

1 

0 

0 

Y 1 

1 

0 

0 

1 

0 

1 

1 

1 

0 

yx** 0 

1 

1 

0 

2 

0 

0 

1 

1 

1 

yx 3 0 

0 

1 

1 

3 

1 

0 

0 

1 

0 

yx 4 1 

0 

1 

0 

4 

0 

1 

0 

0 

1 

yx 3 0 

1 

0 

1 

5 

1 

0 

1 

0 

1 

yx 1 

0 

0 

1 

6 

1 

1 

0 

1 

1 

yx 1 

1 

1 

1 

0 

1 

1 

1 

0 

0 

r 1 

1 

0 

0 

0 

1 

1 

1 

1 

1 

8 1 

1 

0 

1 

0 

1 

1 

1 

1 

1 

8 l 

1 

0 

1 

a k 

= Vi 

+ a k 

-2 

+ a k-4 


-1 _ 6 3 

X * X = X + 

X + 1 

mod 

f(x) 

f(x) 

- x 4 ♦ 

x 2 

+ X 

+ 1 


y - x 3 + x 2 - 

x 2 (x 

+ 1) 



* (x + 

1 ) < x 

3 ♦ 

x 2 + 1) 


R - 3 , 2 . 

o * x + x + 

1 
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1 


( 1 
[ 0 
[ 0 
[ 0 

The vectors representing coefficients of corresponding g(x)'s are also 
linearly independent and span a vector space over GF(2) of dimension 4. Two 
vector spaces of the same dimension and over the same field are isomorphic. 
The mapping from an SSFSR state to its corresponding ISFSR state is realized 
by the linear transformation matrix 


a _ 2 a -3 a _4 xxx 

0 0 0 ]«• Ml 0 1 1) 

1 0 0 )*■ ►[0 1 0 1 ] 

0 1 0 ]- »[0 0 1 0 ] 

0 0 1 ]*• M0 0 0 1J 


T 


1 0 1 l" 
0 10 1 
0 0 10 
0 0 0 1 


(4) 


An SSFSR state a j c _^ » a k-2 ’ a k-3 ’ a k-4 * need not l> e an initial 

state - i.e., k > 0, maps onto a ISFSR state as follows: 


['\-l * a k-2 ’ a k-3 * a k— 4 ] T = [ b 3* b 2’ b l* b o] 
where ^b^, , b^j is the vector representation of 

3 2 

b^x + b^x + b^x + b Q * g(x) 

Let u and u" denote any two SSFSR states (not necessarily distinct). Then T in 
(4) yields 

(dju + d 2 ^)T = d^uT) + d <uT) 
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where c^, c ^ t GF(2) are scalar multipliers. The inverse of T, 

1 0 1 l“ 

0 10 1 

0 0 10 ( 
0 0 0 1 

is the linear transformation matrix that maps every given g(x) to its 
corresponding SSFSR state. The vectors in in (5) (top to bottom), 
respectively, represent SSFSR states corresponding to the natural basis 
t li 0, 0, 0], (0, 1, 0, 0], (0, 0, 1, 0], and [0, 0, 0, 1], representing x 3 , 
x^, x, and 1. 

The cycles of g(x)'s mathematically describe the behavior of a 4-stage 
ISFSR that performs division by a root of f(x) in (2), Let be a root of 
f(x). Then, 

f(a) - o - l + a + a 2 + a 4 

l * a 4 + a 2 + a 

a " 1 . a 3 + a + 1 

Note that a has order 7, and a 1 = <2^ has order 7. The elements a and x 

are equivalent, i.e., they are the same elements in GF(2 4 ) with different 

labels. Thus, x » —> a and 

x*=x^sx^+x+ 1 mod x^ + x 2 ♦ x + 1 

The 4-stage ISFSR performs division by x and reduces the result modulo 
4 2 

x + x + x + 1 (see Figure 3-1). 
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Figure 3-1. A 4-Stage SSFSR and a 4-Stage ISFSR with Isomorphic State Spaces 






Each of the 16 possible SSFSR states in Table 3-1 maps onto an ISFSR as 
follows : 


[ a k- 1 * a k-2 * a k-3 * 



a k-l* a k-2 * a k-l + a k-3 ’ 



( 6 ) 


The next SSFSR state (i.e., at CPI k + 1) is 


Vl* k-2 ’ k 


■->] 


where 


a k-l + a k-2 + a k-4 


and 


[v Vi' Vr V-3] T ■ [v 


\-r * k * 


*k- 2 ' \ * Vl * Vs] 


17 ) 


The right hand side of matrix equations (6) and (7) represent successive 
transformed SSFSR states appearing in the ISFSR in Figure 3-1 at CPI k and 
CPI k + 1, respectively. Given that the ISFSR stores 


'k-T a k-2 * a k-l + a k-3 ’ a k 


at CPI k 


Applying a clock pulse to the ISFSR results in 


°» * a 


V °' 


k-l' k-2' 

a. 


a k-l + a k-3 


*k’ 


a k* a k-i* a k + a k-2 * a k + a k-l + a k-3 


( 8 ) 
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The ISFSR state (8) at CPI k ♦ 1 ia identical to the transformed SSFSR state in 
(7) at CPI k + 1, Thus, the succession of corresponding SSFSR und ISFSR 
states is preserved under the isomorphism. The next state mappings for the 
SSFSR and ISFSR are one-to-one onto and described by the following, 
respective, nonsingular transformation matrices: 


N 


SS 


110 0 
10 10 
0 0 0 1 
10 0 0 


IS 


0 10 0 
0 0 10 
0 0 0 1 
10 11 


The unit vectors comprising the natural basis in an SSFSR vector space 
do not, in general , belong to the same cycle. However, one cycle in an ISFSR 
vector space always contains the unit vectors in consecutive positions . The 
mapping of the unit vectors (in the natural basis) representing SSFSR states 
is related to f(x) in (2) as follows: 

4 3 2 

f(x) * x + c^x + c^x + c^x + 1 
where “ 0 and * c^ * 1 


a k-l a k-: 

2 a k-3 a k 

x3 

x^ 

x 

1 


[ 1 0 

0 

0 ] 

► I 1 

c 3 

c 2 

C 1 

) 

[ 0 1 

0 

o ] 

— - I 0 

1 

C 3 

c 2 

1 

[ 0 0 

1 

0 ] 

— ► ! o 

0 

1 

c 3 

) 

[ 0 0 

0 

1 ] 

► [ 0 

0 

0 

1 

I 


The transformation matrix T in (4) is comprised of the foregoing image 

vectors. The unit vectors (in the natural basis) representing ISFSR states 
3 2 

namely, x , x , x, and 1 are in consecutive positions (of a cycle). Their 
images may be determined directly. 

4 2 3 4 

x f(l/x) - 1 ♦ x + x + x 
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it the reciprocal polynomial of f(x) in (2). It ia the characteristic 
polynomial of the linear recurrence relation 


b k-2 + b k-3 + b k-4 


that describes the state behavior of a 4-stage SSFSR with the sams cycle 
st ructure as the SSFSR in Figure 3-1. Corresponding cycles will contain the 
same states where successive states of one is the reverse of the other for a 
configuration of the former illustrated as follows. 


k 

V 


b 

zlh: 

■A-i 

a k-i a k-2 a k-3 a k-4 

0 

0 

0 

0 

1 

0 

0 

0 

1 

1 

0 

0 

i 

0 

1 

0 

0 

0 

2 

0 

1 

0 

l 

1 

1 

0 

0 

3 

1 

0 

l 

1 

0 

1 

1 

0 

4 

0 

1 

l 

0 

1 

0 

1 

1 

5 

1 

1 

0 

0 

0 

1 

0 

1 

6 

_1_ 

0 

0 

_0 

0_ 

0 

_1 _ 

__0 

0 

0 

0 

0 

1 

0 

0 

0 

1 

Shifting (right to 

left) 

as 

*3ll 

as labeling 

(b k-4 

b k-3 

b k- 

2 b k-l* 18 


the reverse of the SSFSR in Figure 3-1. Since 


a k-l a k-2 a k-3 a k-4 x 3 x 2 x 1 

[0 0 0 1 ] [0 0 0 1 ] 

the additional images of interest are those conesponding to the images of 

0 2 3 

three successive predecessors of x *[0 0 0 1], namely x, x and x . 
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These are the three successor states of b^_^ ^-3 b ^_2 
*[0001] in reverse order. Thus, 


V 

iV 

■2V 

•3 a k-4 

3 

X 

2 

X 

X 

1 


[ 1 

0 

1 

1 ] — 

t 1 

0 

0 

0 

] 

[ 0 

1 

0 

1 ] 

[ 0 

1 

0 

0 

] 

( 0 

0 

1 

0 ) — 

t 0 

0 

1 

0 

] 

( 0 

0 

0 


— [ 0 

0 

0 

1 

] 


The transformation matrix T * in (5) is comprised of the foregoing image 
vectors. Note that T in (4) and T * in (5) are equal for f(x) in (2). 
However T and T * are not necessarily equal for other f(x)'s. 

The significance of the methods presented for determining T and T ^ is 
that they are applicable to every f(x) over GF(2). It obviates the need for 
generating the corresponding SSFSR and ISFSR cycles which is prohibitive 
except for small values of r. 

The binary sequences in the feedback of the SSFSR and the ISFSR in 
Figure 3-1 are identical under the isomorphism. That is, a equals the 

0 K 

coefficient of x for every pair of isomorphic states in Table 3-1. 

Self-reciprocal f(x)'s characterize FSRs that generate palindromic 
sequences. 

Recall that the generating function 
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where 


r 



i*l 


(9a) 


r 

= 1 and f(x) - 1 - ^ c.x* (9b) 

i=l 

characterizes the behavior of an r-stage SSFSR. As previously discussed, 
each possible SSFSR state may be viewed as an initial state that maps onto a 
g(x) that represents an isomorphic ISFSR state. If f(x) in (9b) is reducible, 
an ISFSR state that is a member of a cycle whose length equals the period of a 
particular irreducible or reducible factor may be determined directly. 
Furthermore, the length of the cycle to which any given ISFSR state belongs 
can be readily determined. 

Example 12 

The SSFSR in Figure 3-1 is charac terized by 

f ( X ) = (x + l)(x^ + X 2 + 1) 

The nonzero ISFSR state belonging to a cycle of length 1 is represented 
by 


g(x) 


3 2 

x + x + 1 or 1 


1 0 


1 


Since 


G( x) 


3 2 

x^ + x + 1 1 


(x + l)(x^ + X 4 + 1) X + 1 


is associated with its isomorphic SSFSR state, it is contained on a cycle of 
length 1 equal to the period of x + 1. 
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CPI 

x3 

x2 

X 

1 

k 

1 

1 

0 

1 


0 

1 

l 

0 


1 

0 

l 

_1 

k + 1 

1 

1 

0 

1 


and ISFSR state 1 1 0 1 is its own successor. 

Example 13 

Given an SSFSR described by 

v 10 9 7 5 

f(x) = X + X + X + X +X+1 

= (x + l) 3 (x 3 + X 3 + l)(x^ + X 3 + 1) 

3 3 2 4 3 

The period of (x + 1) is 4, x + x +1 has period 7, and x + x +1 

has period 15. Therefore, the period of f(x) is 

[4, 7, 15] = 420 

The ISFSR state 1100111001 corresponding to 

,.98 5 4 3 i 

g(x) - X + x + x + x + x +1 

= (x + l)(x^+x 3 + l)(x^+x 3 +x^+x+ 1 ) 

is contained in a cycle whose length is equal to the period of 

f(x)/(g(x), f(x)) 
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Since 


( g ( X ) , f ( X ) ) x (x + l)(x 4 + X^ + 1) 


the period of 


f(x)/((x + l)(x 4 + x 3 + 1)) * (x + l) 2 (x 3 ♦ x 2 + 1) 

is [2, 7] or 14, Note that 14 divides 420, the length of the longest 
cycle(s). The cycle of 14 states is 


i of yx 1 

9 

X 

8 

X 

7 

X 

6 

X 

5 

X 

4 

X 

3 

X 

2 

X 

X 

l 

0 

1 

1 

0 

0 

1 

1 

1 

0 

0 

1 

419 (-1) 

1 

0 

1 

1 

0 

0 

1 

1 

0 

1 

418 

1 

0 

0 

0 

1 

1 

0 

1 

1 

1 

417 

1 

0 

0 

1 

0 

0 

1 

0 

1 

0 

416 

0 

1 

0 

0 

1 

0 

0 

1 

0 

1 

415 

1 

1 

A. 

1 

0 

0 

0 

0 

1 

1 

414 

1 

0 

1 

0 

1 

1 

0 

0 

0 

0 

413 

0 

1 

0 

1 

0 

1 

1 

0 

0 

0 

412 

0 

0 

1 

0 

1 

0 

1 

1 

0 

0 

411 

0 

0 

0 

1 

0 

1 

0 

1 

1 

0 

410 

0 

0 

0 

0 

1 

0 

1 

0 

1 

1 

409 

1 

1 

0 

1 

0 

0 

0 

1 

0 

0 

408 

0 

1 

1 

0 

1 

0 

0 

0 

1 

0 

407 (-13) 

0_ 

0 

l 

1 

0 

1 

0 

0 

0 

_1 

0 

1 

1 

0 

0 

1 

1 

1 

0 

0 

1 


where 


-1 

x 


419 _ 9 

x — x 


+ 



6 

x 


+ 


4 

x 


+ 


1 mod f (x) 


r 


9 8 5 4 

x + x + x + x + 


X 3 ♦ 


1 
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The SSFSR state isomorphic to the ISFSR state y (i.e.. 


1100111001) is 


y T _1 = 1001000011 

where 


"i 

1 

1 

0 

1 

1 

0 

0 

1 

T 

0 

1 

1 

1 

0 

1 

1 

0 

0 

1 

0 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

li 


An SSFSR state (vector v) is transformed to its isomorphic ISFSR state by vT 
where 


T = 


1101010001 
0 110 10 10 0 0 
0011010100 
0 0 0 1 1 0 1 0 1 0 
0000110101 
0000011010 
0000001101 
0000000110 
0000000011 
0000000001 


The matrices T and T * are upper triangular matrices where the elements 
the principal diagonal are all l’s. A right shift of the components in 
row of T and T * yield the respective next row of each. 


in 

each 
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Consider the cycle structure of the SSFSR in Table 3-1. There are a 
pair of length 1 cycles and a pair of length 7 cycles. The states in one 
cycle of each pair are the l's complement of those in the other. From 

a k * a k-l + \-2 + a k-4 


state 


a k-l’ a k-2* \-3* \-4 


is succeeded by 


V a k-l* \-2’ a k-3 


.Whereas, state a. .,a. 0 ,a. ~,a., or 

k-1 k-2 k-3 k 


1 + a k _l» 1 + 1 + 1 + *| 


k-2 


k-3’ 


is succeeded by a k » a k _ 2 » a k _ 3 
since 


(1 


+ a k-l } 


+ (1 


4 “k-2* 4 (1 


+ a, > ) 
k-4 


1 + 


and 


|a k | = |l 1 0 1 0 0 o| 

jl + a k | *= |o 0 1 0 1 1 lj 

are complementary feedback sequences associated, respectively, with the 
length 7 complementary cycles of states (see Reference 3). 
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Consider each pair of corresponding ISFSR cycles of states. The 
state(s) of one cycle of each paii are of odd weight (i.e., contain an odd 
number of I's), whereas the state(s) of the other cycles are of even weight. 
The sequence of g(x)*s, namely , |l , x^, x^, ... , xj represent the cycle 
of ISFSR states which are isomorphic to the cycle of SSFSR states 
characterized by 


G(x) 


1 _ = 1 

f ( X ) (x + l)(x 3 + x 2 + 1) 


The elements jl , x^ , x^ , ... , xj form a cyclic group under 
multiplication. However, they with x* adjoined do not form a group under 
vector addition. The vector addition of two distinct vectors of odd weight 
result in a nonzero vector of even weight. Thus, closure is not satisfied and 
|l , x^, x^, ... , xj with x* adjoined do not form a field. This is not 
surprising since f(x) associated with the cycle of nonzero isomorphic states 
is reducible, hence nonprimitive . The sequence of g(x)'s, namely, 

| y, yx^, yx^, ... , yxj where y equals x^ + x 2 represent the cycle of 

ISFSR states which are isomorphic to the cycle of SSFSR states characterized by 


G(x) 


3 2 

x + x 


(x + l)(x^ + x 2 + 1) 


3 2 

x + x + 1 


whose denominator x + x + 1 

( 6 5 5 1 

|y> yx , yx , yx , ... , yxj 

multiplicative identity is x^ 


is primitive. The elements 
with x* adjoined form a field. The 
+ x or y, i.e., y = y mod f(x) 


( 3 2 v 2 6 4 _ 3 2 ^42^ A . 

(x +x) = x +x=x + x mod x + x + x + 1 


The multiplicative inverse of yx^ is yx 7 


(yx^Kyx 7 ■*) = y 2 x 7 


4 2 

= y mod x + x + x + 1 
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3 2 

The element x + x + 1 or 8 with x* adjoined form a field of two elements. 


Given the linear recurrence relation 


= c„ + > c.a. 

0 l k-i 


i=l 


where C£ = 0,1 for 0 < i< r and c r = 1 


( 10 ) 


oo oo 


G(x) 


= Ev k = Ij c o + X}iVi) xk 


k=0 k=0 \ i=l 


oo r oo 

Ev k 


k=0 i=l k=0 


The first term expressed in closed form is 


1 - x 


The second term can be expressed as 


g(x) + E c i xi ) g(x) 
, i=l 
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where g(x) is given in ?(a). It follows that 


where f(x) is given in 

Foi CQ = 0 

as given in (9) • 

For cq - 1 

Since 

g^(x) does not contain 
terms . 

Example 14 


G(x) 


1 - 


- + g(x) 

Too 


Cq + (1 - X)g(x) 
(1 - x)f(x) 


9(b). 


G(x) = 


g(x) 

f(x) 


1 + (1 - x)g(x) gj(x) 

(1 - x)f(x) fj^(x) 


( 11 ) 


g x (l) - 1 + (1 - l)g(l) - 1. 


x + 1 as a factor. Hence, g^(x) has an odd number of 


d k = 


1 + d k-2 + d k-3 
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and 


fj(x) ■ (x + l)(x 3 + x^ + 1) 

describe Che behavior of Che SSFSR in Figure 3-2. The polynomial gj(x) in 
( 11 ) versus d_jd_ 2 d_^ is derived as follows: 

d _ 2 + d.jX 

+ d -3 + d -2 X + d -l x2 

g ( x ) « 

d_2 + d_ 3 + (d_^ + d_ 2 )x + d_jX 

and 

g^(x) ■ (1 + d _2 ♦ d. 3 ) + (d^j + d_^) x + d_ 2 x ^ + d_jX 3 

The successive 3-component SSFSR state vectors map onto the g^(x) 
polynomials as shown in Figure 3-2. The two cycles of g^(x)*s of odd weight 
are respectively identical to the two cycles of g(x)'s of odd weight appearing 
in Table 3-1. Complementation takes place in the feedback path of the SSFSR 
and the ISFSR in Figure 3-2. A one-to-one correspondence exists between the 
SSFSR states and ISFSR states. The linear transformation matrix 


T 


1 1 0 
0 1 1 
0 0 1 


2 

maps d k . 1 d k - 2 d k-2 int ° b 2 b l b 0 re P resentin 8 b 2 y * b \ y + *V 
The inverse of T is 



1 1 1 
0 1 1 
0 0 1 
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0 000 1 I 0001 000 

1 100 1 X 6 1011 110 

2 110 0 X 5 1110 101 

3 Oil 1 X 4 0111 010 

4 101 0 x 3 1000 111 

5 010 0 x 2 0100 Oil 

6 0 0 1 0 x 0 0 1 0 0 0 1 

0 0 0 

1 1 0 

0 111 1 8 1101 100 

8 - x 3 + x 2 + 1 


0 0 0 0 
0 111 


0 0 0 
1 0 0 


Figure 3-2. 

I 


The One-to-One Correspondence Between 
and + b^y + 1 


i 
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Interestingly, T and T * are the same as those associated with an SSFSR 
described by 


\ * \-2 + V 3 


and 


f(x) ■ 1 + x^ + x^ 

3 2 

and an ISFSR that performs division by x modulo x + x +1, i.e., where 
complementation does noc appear in the feedback of the SSFSR or of the ISFSR. 


The next state mappings for the SSFSR and the ISFSR in Figure 3-2 are 
one to one described by affine, trensformations, a transformation followed by a 
translation (see Reference 1). Let u denote the present state of the SSFSR 
and u' the next state. Then 


uN SS + L SS 


where 



0 1 0 " 
1 0 1 
10 0 


and L gg « [ 1 0 0 ] 


Let v denote the present state of the ISFSR and v* the next state. Then, 


VN IS + L IS 


where 


N 


IS 


0 1 0 
0 0 1 
1 1 0 


and L Ig - [ 1 1 0 ] 
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The binary sequences appearing in the feedback of the SSFSR and 1SFSR in 
Figure 3-2 are identical under the isomorphism. That is, 6 . equals 1 + b n 

0 K 0 

(where b^ is the coefficient of y ) for every pair of isomorphic states. 
Example 15 

The behavior of a 4-stage SSFSR is characterized by 


1 + d. . + d. + d. 

k-1 v-2 k-4 


and 


f^(x) * (1 + x)f(x) ■ (1 ♦ x) (1 + x + x^ + x^) 

■ (1 + x) [ < 1 + x)(l + X 2 + X 3 )] 

* (1 -I x) 2 (1 + X 2 + X 3 ) 

One 1 + x factor is due to complementation in the feedback, and the generating 
function is 


G(x) 


g^x) 

T^TxT 


1 ♦ (1 - x)g(x) 

~CT-~TfG') ■ 


Since g^(x) cannot contain 1 - x (i.e., x + 1) as a factor, the SSFSR splits 
the state space into two cycles. One is of length 14 and contains state 
0000. The other 's of length 2. For 


d ■ d 
-1 -2 


d -3 " d -4 


G(x) 


(1 + x) 2 (1 + x 2 + x 3 ) 
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1 


2 2 3 

The period of (1 ♦ x) is 2»1 and 1 ♦ x ♦ x has period 7. Thus, 

4 - [2, 7) • 14. 

For g^(x) - x 3 ♦ x 2 ♦ 1 

G(x) - 1 — 7 : 

(x ♦ ir 

3 2 

and the state that maps onto g^(x) * x + x + 1 is 0101 (see Table 3-2). 
g(x) - (d_j ♦ d_ 2 + d_ 4 ) + (d_ x ♦ d_ 3 )x + d_ 2 x 2 + d_ 1 x 3 


and 


where 


g^(x) * 1 + (1 - x)g(x) 


2 2 A 

8 0 4 8 1 + V * V + 6 4 x 


1+d + d + d , 

-1 -2 -A 

“-2 * d -3 * "-4 

d -l 4 d -2 * d -3 

d -l * d -2 


-1 


Since (01) is the only periodic sequence of length 2, it could be deduced that 


0 10 1 


and 


10 10 
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Table 3- 

2. 

Cycle 

Structure and Isomorphism of 

SSFSR 

and ISFSR : 

States 





Whose 

Respective Next 

State Transformations are 

Affine 

























4 

. 2 

\ 2 



3 

2 


1 

k 

d k-l 

d k; 

-2 d k-3 

d k-4 

d k 


X 

X 

X 

X 

1 

z 

y 

z 

0 

0 

0 

0 

0 

1 

i 

0 

0 

0 

0 

1 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

13 

X 

i 

l 

i 

0 

0 

1 

0 

1 

1 

2 

0 

1 

0 

0 

0 

12 

X 

0 

l 

1 

1 

0 

0 

l 

0 

1 

3 

0 

0 

1 

0 

1 

11 

X 

0 

0 

i 

1 

1 

0 

0 

1 

0 

4 

1 

0 

0 

1 

1 

10 

X 

1 

1 

i 

1 

1 

1 

0 

1 

0 

5 

1 

1 

0 

0 

1 

9 

X 

1 

0 

0 

1 

1 

1 

i 

1 

0 

6 

1 

1 

1 

0 

1 

S 

X 

1 

0 

1 

0 

1 

1 

l 

0 

0 

7 

1 

1 

1 

1 

0 

7 

X 

1 

0 

1 

1 

0 

1 

l 

0 

1 

8 

0 

1 

1 

1 

1 

6 

X 

0 

1 

0 

1 

1 

0 

l 

1 

0 

9 

1 

0 

1 

1 

1 

5 

X 

1 

1 

0 

0 

1 

1 

0 

0 

0 

10 

1 

1 

0 

1 

0 

4 

X 

1 

0 

0 

0 

0 

1 

1 

1 

1 

















11 

0 

1 

1 

0 

0 

X 

0 

1 

0 

0 

0 

0 

1 

1 

l 

12 

0 

0 

1 

1 

0 

2 

X 

0 

0 

1 

0 

0 

0 

0 

1 

1 

13 

0 

0 

0 

1 

0 

X 

0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

1 

0 

0 

0 

c 

0 

0 

1 

0 

1 

1 

8 

0 

1 

1 

0 

1 

0 

1 

0 

0 

1 

1 

0 

1 

0 

0 

8x 

1 

1 

0 

1 

0 

1 

0 

0 

1 

0 

0 

1 

0 

1 

1 

8 

0 

1 

1 

0 

1 

0 

1 

0 

0 

d, 

= 1 + 

d, 



i, , 

8 = 

x 3 ♦ 

2 

X 

+ ; 

L 






k 

k- 

-1 k 


k-‘» 










f j(x) 

- (1 

+ X 

)[(1 + 

x)(l 

+ x 2 + x 3 )] 












= (1 

+ X 

) 2 <1 + 

2 

X + 

X 3 ) 
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are the SSFSR states comprising the cycle of length 2. State 0101 maps onto 


g^x) = + x 2 + 1 = S 

whereas state 10 10 maps onto 

4 3 

(x) * x + x + x = 8x 

Refer to Figure 3-2 and Table 3-1 • The cycle structure (i.e., two cycles of 
length 7 and two of length 1) is changed to that of Table 3-2 by incorporating 
complement ion into the feedback paths of the SSFSR and corresponding IS! SR* 
Note that 



10 11 
0 10 1 
0 0 10 
0 0 0 1 


is the same for both sets of isomorphic SSFSR and ISFSR states* The next 
state mappings, however, are linear and affine transformations, respectively* 

An r-stage SSFSR capable of generating { a^ | that satisfies the 
recurrence relation 


a 


k 


r 


■L-iVi 

i=l 


c^ = 0,1 for 1 < i < r, c^ - 1 (12) 


has a characteristic polynomial 


2 r-1 r 

f ( x ) = 1 + CjX + c 2 x + ♦•• + c r-1 x + x 

The recurrence relation (12) and f(x) in (13) are implied in the following 
theorem. 


(13) 
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THEOREM 1 


Distinct r-stage SSFSR states when viewed as initial states map onto 
distinct polynomials g(x) f s of degree less than r. 

Proof 

Expanding (9a) gives 
g(x) = c 1 a_ 1 


r-1 

X 

The 2 r state vectors of the SSFSR form a vector space U over GF(2) of 
dimension r that is spanned by the linearly independent r unit vectors, 
mappings of the unit vectors which are a natural basis of the r-dimens ional 
vector space follows from (14). 


(14) 


The 


+ c 2 l a _2 + a -l x ^ 


r 3 r 2 

+ C r-l (a -r+l + a -r+2 X + "* + *- 2 **" + ‘-l*'" ) 


r-3 r-2 

a +a + ... + a ~x + a 0 x +a 

-r -r+1 -3 -2 


a 1 a a a 

1 -2 • . » -r+ 1 r 


[1 0 


0] 


r-1 r-2 

X + c ,x + 
r-1 


+ c 2 x + c l 


[0 1 ... 0 0 ] 


x r ' 2 ♦ 


+ c 3 x + c 2 


[0 0 ... 1 0 ] 


X + c 


r-1 


[0 0 ..0 1 ] 


(15) 
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The r images (i.e., g(x)*s are linearly independent polynomials chat span a 
vector space V over GF(2) of dimension r. Thus, each of the 2 r distinct 
linear combinations maps onto a distinct polynomial g(x) of degree less than r. 

Q.E.D. 


Each coefficient in 


b r ^ 1 x r 1 + b r . 1 xr 2 + + b Q - g(x) 

is a distinct linear combination of a_^, a^, ... , and a 

COROLLARY 1.1 


The ) inrar transformation 


r-1 

x 


r-2 


x 


r-3 

x 


... X 


1 


1 

o 



C r-2 

C r-1 




T * 



... 

... 

... 


0 

0 


0 0 ... 1 c , 

r-1 

0 0 ... 0 1 


is an isomorphism of U onto V. 
Proof 


(16) 


The linear transformation matrix T is the one-to-one mapping in (16) 

where 


uT « v u € U and v € V 
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Since the r row vectors of T are linearly independent, T is nonsingular and 
its inverse T 1 exits. 

The inverse T * is a linear transformation. Given (state) vectors v 
and v in V and scalar multipliers e^ and e ^ in GF(2). 


(e^v + e 2 v)T *T ■ (e^vH + (e^I 

* [e^vT 1 ) + 62^1 ^ ) ] T 


Postmult iplying both sides by T 


yields 


(e L v + e 2 v)T -1 = e^vT" 1 ) + e 2 (vT *) 


thus, T * is a linear transformation. 

The one-to-one onto linear trans format ion 
T : U ►V 

is an isomorphism. Every set of linearly independent vectors u^, u 2 , ••• , 

u in U where m < r is map, ad onto a linearly independent set of vectors v , 

m — 1 

v„, , v in V. When m = r, the vector space U is spanned and the vector 

l m 

space V is spanned. For u^ = [1, 0, ... ,0] u 2 = 1* ••• , 0] , ... , 

u = [0, 0 . . . , 1], a natural basis for V, every vector ueU has a unique 
expression 

u = a -i u i + a -o u 2 + + a r u r (17) 

which is a linear combination of the u^'s. Given that u is expressible as 

u - h^u^ + ^2 U 2 * ••• 4 ^r U r 
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Then 


u - u = 0 


(a _ 1 - h 1 )u 1 + (a _2 - h 2 )u 2 + ••• + ~ h r ^ u r 


and since u^, . .« , u^ are linearly independent 

a . - h. ■ 0 and h. * a * for all i. 

-li 1-1 

Thus, (17) is unique and uniqueness of representation holds for every given 
basis. 


The respective images of u^, 
polynomials in (15) where 


u r-l* u r are the 


r-1 r 

x + c i x + 
r-1 


+ c 2 x + c 1 


is the image of * [1, 0, ... , 0, 0]. The components of the image vector 


= l ^ 1* ** # 9 °2 9 ^1^ 


are the ordered coefficients of the polynomial g(x) of degree r-1 excluding 
Cq resulting from the mapping of 

[a_^ , a_2 * ••• » a_^ ] — [1, 0, ... , 0, 0] 

in accordance with (15). The vectors v^, v^, ... 3 v r are linearly 
independent and form a basis in V. Postmult iplying both sides of (17) by the 
transformation matrix T in (16) gives 

uT = (a_jU^ + a _2 u 2 4 ••• + a - r U r^ T 

= a_^(u^T) + a_ 2 (u 2 T) + ... + a_^(u r T) 
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Thu 8 , 


V = a -l V l + a -2 V 2 + “• + a - r v 2 (18) 

and every vector veV is uniquely expressible relative to the basis v^, v^, 

•it , V « 

r 

The a_^'s in (17) and (18) are scalars in the field GF(2). From 
Reference 1, each basis u^, , • • • 9 u in a vector space U over a field 

F provides an isomorphism of U onto space U f (F). The isomorphism is 
the correspondence which assigns to each vector u€U the r-tuple of its 
coordinates relative to u as follows: 

(a_ 1 u 1 + a -2 u 2 + ... + a_ r u r )C u = (a_ 1# a_ 2 , ... , a_ r )€U r (F) 

where F, in this case, is GF(2). Since the number of vectors r in a basis is 
determined by the dimension r, which is invariant (as proved in References 1 
and 5), every finite-dimensional vector space over a field F is isomorphic to 
one, and only one , space U r (F). 

Q.E.D. 

A more convenient basis in V is 

[x r_1 , 0 ..... 0, 0] 

[0 , x r ~ 2 , ... , 0. 0] 

. . . 

. . . 

. . . 

[0 >0 > ... , x, 0] 

[o ,0 , ... , 0, 1] 

and every element in V may be expressed as 

b r _jX r 1 + b_ 2 x r 2 + ... + bjX + b Q = g(x) 
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From (14), 


b , ■ a . 
r-1 -1 


b r -2 ’ Vl“-1 * a -2 


c 2 a -l * c 3 a -2 c r-l a -c+2 * a -r*l 


a 0 ' b 0 • V-L * c 2 a -2 * "• * c r-2 a -r+2 * c r-l a -t*l * a -r 


(19) 


Given an r-stage SSFSR capable of generating that satisfies the linear 

recurrence relation in (12) and has the characteristic polynomial f(x) given 
in (13). The state 



- 2 ’ 


-r+1 1 


a -r ] 


[ 0 , 0 , ••• , 0 , 1 ] 


always has [1, 0, . . . , 0, 0) as its successor state (which may be viewed as 
another initial state). The corresponding ISFSR states represented as 
polynomials are 


[ 0 , 0 , ... , 0 , 1 ] ► 1 

r -i r -2 

[1, 0* ... , 0, 0] ► x + C r-l X + + C 2 X + c i 


Note that 


. -1 _ -1 _ , r-1 r-2 

1 • x = x = (x + C r-l X + 


+ c 2 x + c^) mod f(x) 


and 1 divided by x reduced modulo f(x) in (13) is the polynomial representing 
the ISFSR successor to 1 (the nonzero constant polynomial). 
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THEOREM 2 


Successor states of isomorphic SSFSR and ISFSR states are isomorphic, 


Proof 


a _2 * ••• 9 a -r+l* a -r * I^r-1 * ^r-2* *** * ^1* ^q1 


where T is given in (16) and each is a distinct linear combination of the 
a_^'s as shown in (19). 

The next state transformation matrix N gs of the r-stage SSFSR is 


SS 


'r-1 


1 0 ... 0 0 

0 1 ... 0 0 

• • • a • a • 

• 9 • • • • • 

• • i • • i « 

0 0 ... 0 1 

0 0 ... 0 0 


( 20 ) 


The next state transformation matrix N^g of the corresponding r-stage ISFSR 


is 


IS 


0 1 

0 0 

* ■ 

. . 

* • 

0 0 

1 c 


0 

I 


... 0 

... 0 


r-1 r-2 


♦ a 

• • 


... o 1 


... c 2 c x 


( 21 ) 
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Denote the successor to 


u * t a _i* a _2 » • 
by u' - a'_ 2 , 


* a -r+l , a -r 


-r+1 


• a ’-r> 


and the successor to 


Then, 


V " (b r -l * b r-2* *•’ * b l* V 

by v' - [b' r _ 1 , b ( r _ 2 , ... , b' lt b' 0 ) 


[ a *_ 1 » a'_ 2 » 
- i*.,, *_ 2 . 


a '-r*l' “'-r 1 

a , , a ]N„„ 
-r+1’ -r SS 


t a 0 * a -i» **’ » a - r +2 ’ a -r+l ^ 


( 22 ) 


and 


^ b 'r-l* b ' r-2 b ' 1 * b V 

= [b r-l* b r-2 b r b O lN IS 

= [ V C r-l b 0 + b r-l * *•* * C 2 b 0 + V C l b 0 + b l ] 


(23) 


where is expressed in (19), The assertion that 


t a '_!» a '_ 2 a'_ r+ i , a'_ r )T ■ lb' r _ 1 , b' r _ 2> ... , b'^ b ' Q ] 


is shown as follows: 
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In accordance with (19), (22), and (23) 


r-I 


b’ 


r-2 


c r- l a '-l + 3 ' -2 


Thus, if 


then 


C r-L a 0 + 3 -l 
C r-l b 0 + b r-l 


c 2 a '-i + (c 3 a ’-2 + + C r-i a '-r+2 + “‘W 

C 2 a 0 + (c 3 a - 1 + •" + C r-l a -r+l + a -r42 } 

C 2 b 0 * b 2 

c l a '-l + (c 2 a ’-2 + ”• + C r- 2^ ’-r+2 + C r-l a '-r4l + a V 
C l a 0 + (c 2 a -l + + C r-2 a -r+l + C r-I a -r+2 + a -rvL ) 

C l b 0 + b l 


uT * v 


u'T * v 1 


Furthermore, 


vT~ l «* u and v'T~ l 


Q.E . D. 
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It may be concluded from THEOREM 2 that the cycle structure (i.e., the 
number of cycles of a given length) is identical for an r-stage SSFSR and an 
r-stage ISFSR with isomorphic state spaces. This is a consequence of the 
preservation of the next-state operation under the isomorphism 

T : U ►V 


COROLLARY 2.1 


Matrices N gs 


in (20) and N^g in (21) are similar (see Reference 1). 


Proof 


(uN cc )T - u'T - v' * u(N T) 
bS S3 


where T is given in (16)* 


<"T>»IS ■ vN IS * V ' ' “ < ™I8 ) 


NggT and TN^g both map a given u € U onto the successor of the 
corresponding v € V, namely v*. Therefore, 


N 


SS 


TN 


IS 


and 


N 


SS 


TN 



Q.E.D. 


Consider the affine transformation 


uN 


SS 


+ L 


SS 


where Lg g ■ [1,0, ... , 0) a 1 x r vector. 
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Then, 


u'T ■ (u» ss )T . L $S T 

and 

L SS T " L IS “ ^ 1 ’ c r-l' C r-2 C 2* c l^ 

From THEOREM 2, 

( U » SS )T - »• 


>rior to the translation by L„„T. Given that u < ► v and 

' " n 17 ■- rr “ -u. -m~~r ■' u irr . W Q 


v " IVl' b r-2> • b l> b 0 ] 


representing 


b r-l yr ~ l + b r-2 yT ~ 2 * •“ + b l y + b o 


The successor to v, namely vN iz the vector summation 

i j 


r-1 

r-2 

1 

V 

y • • y 

10, 

b 1 1 «• • • > ♦ 

V 

* b 0 ll. 

c ^ » * ♦ • i c 2 * 

c i> 
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prior Co translation by L 


The vector summation 


IS' 


r-l 

y 

r-2 

y 

... y 

i 


(0, 

b r-r 

• • • > *>2 * 

b i> 



♦ V 1 ’ 

C r-1* 

• * * * c 2 » 

c i ] 



(where * 1 + b^) includes the effects of translation by Ljg. The 
content of the rightmost ISFSR stage is bg, the scalar multiplier of the 
feedback vector (1, c r _^» ••• * c 2 » Translation by L^g is 

realized by complementing bg which results in the fr.-.'djack vector 


V 1 ’ 


'r-l * 


2 * 1 


c,l 


The implementation of the ISFSR in Figure 3-2 is an example. 

Consider the logical circuitry associated with an SSFSR whose 
characteristic polynomial 


f(x) * x r + x a + l 
is a trinomial. Let a be a root of f(x). Then, 

a " 1 - a r_1 + a 3-1 

represents the feedback of a corresponding r-stage ISFSP. The ISFSR performs 
division by a mouulo f(a) on its contents. As shown in Figure 3-3, the FSRs 
are topologically equivalent and of identical complexity (i.e., in the number 
of switching elements and propagation delay in the feedback). 
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d k-l d k-2 d k-a d k-a+l d k-r 



d k = d k-a + d k-r 
f(x) ■ x r + x a + 1 



f(a) = a r + a a + 1 = 0 
a" 1 s a r_1 + a a_1 MODULO a r + a a + 1 

Figure 3-3. An SSFSR and its Corresponding ISFSR of Identical Complexity 
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SECTION IV 


THE EXISTENCE AND ALGORITHMIC DETERMINATION OF A TRINOMIAL 
OF LEAST DEGREE THAT CONTAINS A GIVEN IRREDUCIBLE 
POLYNOMIAL OVER GF(2) AS A FACTOR 

A. PRIMITIVE POLYNOMIALS OVER GF(2) 

Primitive polynomials of degree r over GF(2) correspond to r-stage SSFSRs 
(and ISFSRs) capable of generating PN sequences. A PN sequence satisfies 
three postulates of randomness as proven in Reference 3. 

An example of a binary sequence that is random results from repeated 
tosses of an ideal coin. Associated with randomness are the following 
properties : 

(1) The number of heads and tails are approximately equal. 

(2) Short runs of consecutive heads or consecutive tails occur more 
frequently than long runs. Quantitatively, approximately 1/2 of the 
runs are of length 1, 1/4 of length 2, ... , 1/ 2 X * of length i, ... 

(3) The autocorrelation of random sequences is peaked in the middle and 
sharply drops at the ends. 

Consider the periodic binary sequence 

A 1 " ( a l* a 2’ **• » *JL-V a j ?} where i « 2 r -1 

emanating from an r-stage SSFSR whose characteristic polynomial is an rth 
degree primitive polynomial. The randomness postulates satisfied by |a^ 
are: 
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PI. Balance 



Let Wg and denote the number of 0's and l*s, respectively, in 
Then, 


w o " w i - 1 


The disparity is exactly 1 for a PN sequence. 

P2. Runs and their lengths 

Within a period with a^ and a^ appearing consecutively, the 


re are: 


(1) One run of length r comprised of r consecutive l's and one run of 
length r - 1 comprised of r - 1 consecutive 0's. 

(2) Two runs of length L for each run of length L+l for each value of L 
where 1 < L < r - 1. 

One-half of the runs of length L are comprised of 0's. Runs of G's 
alternate with runs of l's, and the total number of the runs of 0's are equal 
to the total number of runs of l's. 

P3. Two-valued autocorrelation 

The set comprised of 


> 

II 

K- 

a 2 > • * • 

> a j2-i * a j 

II 

CM 

< 

tv 

a^ » • * • 

» a jJ» a ij 

A 3 * 

• 

• 

1*3’ 

a^ , • » • 

• 

• 

» a l» a 2| 

A i = 

h' 

a^ , ... 

CO 1 

CM 

1 

a* 


and 


A Q - jO, 0 0, 0| 
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from an Abelian group G of order 2 r under the binary operation of "addition" 
defined on G as termwise sum modulo 2. 

A. and A. satisfy the same linear recurrence relation. Therefore, 

1 J 

A. + t. . for all i and i satisfies the linear recurrence relation. Thus, G 
i J 

is closed under " + " defined on G. 

Denote a, b, and c over GF(2) as orresponding terms or components of 
A^, Aj, and A^, respectively. Since 

(a+b)+c=a+(b+c) mod 2 

elements in G are associative under 

The unique identity element of G is Aq. 

A. + A. = A. + A. = A. for all i 
l 0 0 l i 

Every element A^ in G has a unique (additive) inverse , namely, itself. 

A. + A. = A n for all i 
l i 0 

The elements in G are commutative under "+" since 

a + b = b + a mod 2 

Thus, G under "+" defined on G is an Abelian group (see References 1, 3, 4, 
and 5). 

The PN sequence and each of it' cyclic shifts can be uniquely identified 
by its first r terms (i.e., components). Each corresponds to a unique initial 
state of the r-stage SSFSR. Thus, only the first r terms of A^ + A^ need 
to be determined to identify the resulting sequence. 
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Again, consider the PN sequence 


L l“{‘ 


V 


a j2-l* a i, 


where $L 


2 r - 


Let 


b. ■ 1 - 2a. for all i 

l l 


Then, replacing 0's by l's and l's by -l's in A^, A^, ... , A^ yields 
B 0 . Bj, ... f Bjj , respectively. The two tables 


a. 

i 

0 

1 

b. 

i 

1 

-1 

0 

0 

1 

1 

1 

-1 

1 

1 

0 

-1 

-1 

1 


reveal the isomorphism 


(a. + a.) mod 2* *~b.b. 

i J i J 


Thus 


B.B. 
i J 


+ Aj * A^ corresponds to = B^ where the product 

is taken term-by-term. 


The autocorrelation function C(t) is two-valued. Explicitly, 


i for T = 0 
-1 for 0< T<i 

Note that C(r) is the dot product of one vector whose components are comprised 
of l's and -l's (corresponding to the 0's and l's of a PN sequence), say B^, 
and B^ cyclically shifted by T components. Since B^B^ - B^ is a 
vector corresponding to an element in the Abelian group G, it is comprised of 
1 l's if i - j (i.e., B fe = Bq) or one more -1 than 1 if i jt j* Thus, a 
PN sequence is highly distinguishable from any phase shift of itself. 


iC(T) = 


b k b k+T 


k=l 
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Example 16 


A 31 -bit PN sequence is generated by 5-stage SSFSR described by the 
linear recurrence relation 


a - a. . + a + a 0 + a. c 
k k-1 k-2 k-3 k-5 

whose characteristic polynomial is 

5 3 2 

f(x) = x + x + x + x + 1 

a primitive polynomial. A period of |a^} appears in Figure 4-l(a). 

Of the 31 bits in ja^}, 15 are 0's and 16 l's. The postulate PI on 
balance is thus satisfied. In general, a PN sequence of period 2 r - 1 will 
contain 2 r * l's and 2 r *-l 0's. The one less 0 is due to the absence of 
the all zeros state in the cycle of the states of the PN generator. 


The run length properties of the PN sequence are shown in Figures 4-l(a) 

and (b). The distribution of runs is in accordance with postulate P2 . In 

r 

general, a PN sequence of period 2 - 1 contains one run of length r and one 

r — 1 — L 

of length r-1. For 1 < L< r - 1, there are 2 runs of length L, half 

of which are 0's. 


The closure of two distinct elements in |Bq, B^, ... , } under 

termwise multiplication is shown in Figure 4-l(c). In general, 


Also, 



sincej2=0 mod 2° - 1 


j? c (t) 


i-l 


b b 
k k+T 


k=0 


A for r ■ 0 
-1 for 0 < T < A 
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Figure 4-1. (a) A 31 bit PN Sequence, (b) its Run Length Properties, 

(c) Closure Illustrated in the Isomorphic Abelian Group 



In normalized form, 


C(t) 


! 1 for r =0 mod 2 r - 1 

1 for T0O mod 2 l - 1 
" 2 r -l 


Specifically, in Figure 4-l(c), 


31C(4) - -1 


since 


b k+18 “ b k b k+4 

io the same sequence as cyclically shifted 18 places to the left. It, 
thus, has one more -l than +1 components. 

■ 

There are four known classes of binary sequences which satisfy both j 

postulates PI and P3. See Chapter 4 in Reference 11, which terms all sequence | 

in these classes as PN. Of these four classes, only the class of length 
2 r - 1 sequences which can be generated by r-stage SSFSRs or ISFSRs satisfy jj 

P2 as well. In this report, only the length 2 r - 1 sequences are referred jj 

to as PN or maximal-length sequences. » 

Of particular interest are primitive trinomials over GF(2) that 
characterize PN generators of minimal complexity. However, there are many 
values of r for which no irreducible r tb degree trinomial exists. 

Furthermore, there are other values of r where irreducible r tb degree 
polynomials exist, but none are primitive. Irreducible trinomials over GF(2; 
up to degree 1000 were determined by a sequence of four tests in References 12 
and 13. The primitive trinomials are distinguished from the irreducible 
nonprimitive trinomials. The period and/or the index is given for many of the 
latter. 
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The only general nontrivial result on trinomials 


T . (x) * x f ♦ x k + 1 
r i K 

was proven in Reference 14. The parity (even or odd) of the number of factors 

T . (x) is deterministic (from Corollary 5, page 1105 in Reference 14). 

T . (x) has an even number of irreducible factors and, thus, must be 
r ,K 

factorable if, and only if: 

(1) r is even, k is odd, r * 2k, and rk/2 = 0 or 1 mod 4 

(2) r is odd, k is even, k does not divide 2r, and r = + 3 mod 8 

(3) r is odd, k is even, k divides 2r, and r = + 1 mod 8 

In all other cases T (x) has an odd number of factors* Note that if r and 

r , k 

k are both odd, the reciprocal trinomial is subjected to test (2) 

or (3). 


The foregoing test preceded by two simple tests were used in References 
12 and 13 to speedily eliminate reducible trinomials before applying the 
four cla test (based on an efficient method developed by Berlekamp for factoring 
polynomials over a finite field)* See Chapter 6 in Reference 4. 


Example 17 

The trinomials T e . (x) over GF(2) are reducible* If k is even, 

otQ | K 

k * 2k j, and 


8m 2k l 
x + x 


♦ 1 


, 4m ^ 1 

(x + x + 


1 ) 


If k is odd, 


8m * 2k and 8mk/2 = 0 mod 4 


Thus, Tg^^tx) has an even number of factors for k odd. 
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A trinomial T 
both even. If 



x) 


is square-free if, and only if, r and k are not 


T . (x) ■ x r + x* 1 ♦ 1 

r ,k 

has a repeated factor, then its derivative 

T* . (x) ■ (r mod 2)x r * ♦ (k mod 2)x^ * 
r,k 

is divisible by this factor* Then, T , (x) is either: (1) a power of x 

» • r- 1 l 

which is relatively prime to T , (x) or (2) is of the form x + x 

r , k 

However , a divisor of both 

r-1 k-1 , r k • 

x + x and x + x +1 

must also be as divisor of 

r A k ^ t A ( r-1 k-1* _ - 

x + x + 1 + x(x + x ) ■ 1 

Thus, T , (x) where r and k are not both even is square-free (see 
r , k 

Reference 3)* The period of such trinomials is the LCM of the periods of its 
irreducible factors* 

The periods of square-free trinomials over GF(2^, their factors, and the 
periods of their factors through degree 36 are given in Reference 3. Also, 
the factor of lowest degree is listed for square-free trinomials of degree 37 
through 45. The wide applicability of PN sequences has been an impetus in 
searching for primitive trinomials. 

The remainder of this subsection deals with finding trinomials which 
contain a given primitive polynomial as a factor. The state-beha* '.or of an 
r-stage PN generator can, thus, be encapsulated by an n-stage SSFSR (or ISFSR) 
where n r. Additional register stages are the cost of reducing the 
complexity of the feedback to one 2-input Exclusive-OR gate . 
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E ver y nonzero element in GF(2 r ) is expressible as an integer power of a 


a J » b r _ 1 a r_1 + b r _ 2 a r ” z ♦ ... + b t a ♦ b Q 


.r-2 


(24) 


where b.c GF(2) and a is a root of a primitive polynomial f(x) of degree r 
over GF(2). Two elements, a J and a , are defined to be a Compatible Pair 
(CP) if 


a- 5 + a k - 1 (i.e., 00 ... 01) 


(25) 


1 K 

The CP a J and a in (25) correspond to states in an r-stage ISFSR which 
differ only in b^ (the content of stage a *1). From (24), the two 
states are 


b r-l b r-2 b l b 0 and b r-l b r-2 b l b 0 


Lemma 3 

i 

Among the 2 r - 1 nonzero elements in GF(2 r ), there are 2 r * - 1 compatible j 
pairs. Each of the 2-1 binary r-tuples ^ r .^ b r _2 *" exce P t 

00 ... 01 is compatible with one and only one nonzero r-tuple. The 2 r - 2 \ 

such elements comprise 2 r * - 1 CPe. j. 

j 

i 

THEOREM 3 

Given any r tb degree primitive polynomial f(x) over GF(2). Let a be a 
root of f(x) a 0. Then, for every CP and Cl k (k > j), 

f(a ) divides a k + 0^ + 1 


Thus, 


f (x ) 


divides 


V 


x 


x j + 1 
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! 


Proof 


Since 


and a* 1 


are a CP. 


1 J 


+ a' 


l 


and 


f(a) - a k + ♦ 1 - o 

)c i 

Thus, f(x) and x ♦ x J ♦ 1 have a common polynomial factor (since they 

r 

have a common rooC a in GF(2 )). Since f(x) is irreducible over GF(2), 

f(x) divides x* 1 + x^ ♦ 1 

This implies Chat k > r Che degree of f(x). Consider Che elemenCs (i.e., Che 
polynomials) 1, a and a T * where a is a rooC of 

f(x) * x r + b x r 1 + b ,x r 2 ♦ ... + b x + 1 
r-1 r-l 1 

a primicive polynomial over GF(2). 


j of j 
J a J 

b r-l 

b r-2 

• • • 

b l 

1 

0 

0 

0 

« • • 

0 

1 

1 

0 

0 

• • s 

1 

0 

• 

• 

• 

r-2 

0 

1 

• • • 
• • • 
• • • 

• • • 

0 

0 

r-l 

1 

0 

• • • 

0 

0 
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No CP exists among l,a * Q* * and 


a r - b^cf -1 ♦ b r _2 ar ” 2 + ••• * b i a + 1 


is compatible with ior one value of j < r if and only if f(x) is a 
trinomial. If f(x) is not a trinomial, then the degree k of 


a k <1^ + 1 - 0 


i k 

exceeds r for all CPs a J and a . 


Q.E. D • 


COROLLARY 3.1 


i W 

If a J and a are a CP, then 


2 j mod 2 r -l . 2k mod 2 r -l 
a and a 


are a CP in GF(2 r ) 

Proof 

If 1 • a J ♦ a k , then 

i /r*j «kv2 _2j mod 2 r -l A ^2k mod 2 r -l 

l * (a J + a ) - a J ♦ a 


Q.E. D. 


COROLLARY 3.2 

A trinomial of degree r ♦ 1 cannot contain an irreducible polynomial, 
hence, a primitive polynomial of degree r as a factor. 
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Proof 


For a trinomial, 


T(x) 3 x r+1 + ♦ l 

tW 

to contain an r degree irreducible polynomial, it must also have a degree 
1 factor. However, since 


T(0) = 0 + 0 + 1 = 1 
x is not a factor of T(x), and since 


T ( 1 ) -l + l + l- l 


x + 1 is not a factor of T(x). 


Q.E.D. 


The trinomial of least degree (among 2 r * - 1 trinomials associated 
with 2 r * - 1 CPs) that contains a given r th degree primitive polynomial 
(with five or more odd number of terms) as a factor is of degree n > r + 2. 

Let (3 be a root of 


h(x) = x + x + 1 


Since h(x) divides x -1, (3 is among the 3 roots of unity. Thus, 


/3 3 -l=/3 2 + /3+i=0 


and 


£ 3 = i 
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A trinomial 


T(x) = x 11 + x a + 1 

is divisible by h(x) if and only if T(/3) * 0. Thus, if 

mod 3 + mod 3 + x = ^2 + ^ + t 

2 th 

T(x) contains x + x + 1 as a factor. It is, thus, possible for an r 

degree irreducible polynomial to be a factor of a square-free T(x) of degree 

n = r + 2. 

Example 18 

The trinomial 

T(x) = x^ + x 3 + 1 
contains x* + x + 1 as a factor since 

016 mod 3 + ^ 5 mod 3 + 1 =/3 2 + /3 + i 

It may be verified that a degree 14 primitive polynomial is the only other 
factor . 


Example 1'j 


The trinomial of least degree that contains the primitive polynomial 


6 5 2 

f(x) = X + X + X + X+1 


as a factor is determined algorithmically as follows: 
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2 6 7 

(1) Initially , a , a , *•* , G , and CL are computed and stored as 
a list of binary state-vectors (see Table 1-1). 


i of a 1 b5 b^ b3 b2 b^ bQ 


1 

0 

0 

0 

0 

1 

0 

2 

0 

0 

0 

1 

0 

0 

3 

0 

0 

1 

0 

0 

0 

4 

0 

1 

0 

0 

0 

0 

5 

1 

0 

0 

0 

0 

0 

6 

1 

0 

0 

1 

1 

1 

7 

1 

0 

1 

0 

0 

1 


8 2 

(2) CT is computed and compared for compatibility with a, a , ... , 

and 0^. 

g 

(3) If a is compatible with an element in the initial list, stop. If 

8 9 

not, append CL to the list and repeat step 2 for a computed a 

and the augmented list, and so on. 

11 8 

The first CP to be found is a and (2 . 
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i of a 1 


bj b^ b3 b2 b^ bg 


0 0 0 0 1 0 
0 0 0 1 0 0 
0 0 1 0 0 0 
0 1 0 0 0 0 
1 0 0 0 0 0 
1 0 0 l 1 1 

10 10 0 1 
110 10 1 
0 0 110 1 
0 110 10 
110 10 0 


110 10 0 
110 10 1 
0 0 0 0 0 1 


» u + a 8 ♦ l oooooo 


f(a) * a 6 + a 5 + a 2 + a + l * a 11 + a 8 + l « o 


n . . . i 

X +X + 


✓5. 4 , 3.x,lvy6. 5. 2,x.l* 

(x + x + x + + )(x+x+x + +) 


Consider an 11-stage ISFSR that performs multiplication by x and reduces 

11 8 

the result modulo x + x + 1 - Successive states represent polynomials 
of degree less than 11 since 


11 _ 8 , 11 8 ^ . 
x = x + 1 mod x * x + 1 
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The cycle in Table 4-1 of length 63 corresponding to the order of a, a root of 

f(x) ^x^+x^+x^+x+l^O 

contains the state y representing the factor 

5 4 x 3 - - 11 8 , 

x+x+x+x+lofx + X 4 1 

Recall the isomorphism between SSFSR and ISFSR states where an SSFSR state 
maps onto g(x) that represents the corresponding ISFSR state. The isomorphism 
was established using f(x), the characteristic polynomial of the SSFSR and an 
ISFSR that performs division by x and reduces the result modulo f(x) (see 
Table 3-1). However, an ISFSR that performs multiplication by x and reduces 
the result modulo the same f(x) has the same cycle structure with the order of 
states reversed in each cycle* Thus, g(x)'s in a cycle of the former, appear 
in reverse order in the corresponding cycle of the latter. 

The 63-bit PN sequence under column heading b in Table 1-1 is 

0 0 

identical to the partially listed sequence under column heading JL (i.e., x ) 
in Table 4-1. 

COROLLARY 3.3 


The trinomial of least degree that contains a given primitive polynomial 
f(x) as a factor is square-free. 

Proof 


Assume 


x 2n + x 2a + \ = (x n + x a + 

is the trinomial of least degree that contains f(x) as a factor. From 
COROLLARY 3.1, Of" and a a are compatible and 

f(x) divides x 11 + x a + 1 

contradicting the assumption. Q.E.D. 
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Table 4-1. A 63-State Cycle Associated with 





X 6 ♦ 

x 5 ♦ 

X 2 ♦ 

X + 

1 a 

Factor 

of 

11 ^ 
X + 

X 8 + 1 

i of yx 1 

x 10 


x® 

x? 

x® 

X 5 

X 4 

X 3 


X 

1 

0 

0 

0 

0 

0 

0 

1 

1 

1 

0 

1 

1 

1 

0 

0 

0 

0 

1 

1 

l 

0 

1 

1 

0 

2 

0 

0 

0 

1 

1 

1 

0 

1 

1 

0 

0 

3 

0 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

4 

0 

1 

1 

1 

0 

1 

1 

0 

0 

0 

0 

5 

1 

1 

1 

0 

1 

1 

0 

0 

0 

0 

0 

6 

1 

1 

1 

1 

1 

0 

0 

0 

0 

0 

1 

7 

1 

1 

0 

1 

0 

0 

0 

0 

0 

1 

1 

8 

1 

0 

0 

0 

0 

0 

0 

0 

1 

1 

l 

9 

0 

0 

1 

0 

0 

0 

0 

1 

1 

1 

1 

10 

0 

1 

0 

0 

0 

0 

1 

1 

1 

1 

0 

11 

1 

0 

0 

0 

0 

1 

1 

1 

1 

0 

0 

12 

0 

0 

1 

0 

1 

1 

1 

1 

0 

0 

1 

13 

0 

1 

0 

1 

1 

1 

l 

0 

0 

1 

0 

14 

1 

0 

1 

1 

1 

1 

0 

0 

1 

0 

0 

15 

0 

1 

0 

1 

1 

0 

0 

1 

0 

0 

1 

16 

1 

0 

1 

1 

0 

0 

1 

0 

0 

1 

0 

.17 

0 

1 

0 

0 

0 

1 

0 

0 

1 

0 

1 

18 

1 

0 

0 

0 

1 

0 

0 

1 

0 

1 

0 

19 

0 

0 

1 

1 

0 

0 

1 

0 

1 

0 

1 

20 

0 

l 

1 

0 

0 

1 

0 

1 

0 

1 

0 

21 

• 

1 

1 

0 

0 

1 

0 

• 

1 

0 

1 

0 

0 

• 

• 

60 

0 

1 

1 

0 

1 

• 

9 

1 

0 

0 

1 

1 

1 

61 

1 

1 

0 

1 

1 

0 

0 

1 

1 

1 

0 

62 

1 

0 

0 

1 

0 

0 

1 

1 

1 

0 

1 




y = x^ 

+ X 4 

♦ X® 

+ X 

+ 1 
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The triromial of least degree that contains a given primitive polynomial 
over GF(2) as a factor may be determined from Appendix B. One primitive 
polynomial, f(x), of every reciprocal pair is listed for degrees 5 through 
12* The octal equivalent of the binary coefficients in descending powers of x 
represents f(x). In example 18, it was shown that 

X 11 + x^ + 1 * (X 5 + x^ + x'* + x + QC x^ + x^ + x^ + x+l ) 

The octal representations of the respective factors are 73 and 147 . See 
Appendix B for row entries associated degree r of 6 and f(x) represented by 
147 . Clearly, 

x^ + x'* + 1 - (x^ + x^ + + x + l)(x^ + x^ ♦ x^ + x + 1) 

The respective octal representations of the factors are 67 and 163. Since 147 

and 163 represent a reciprocal pair of primitive polynomials of degree 6, only 
147 (with the lower octal representation) and T(x) (n * 11, a = 8) of lowest 
degree containing 147 as a factor are listed. 

Consider the entries in Appendix B associated with r of 9 (degrees of 
f(x)) and 1243 , the octal representation of f(x). 

T(x) = + x + 1 (n = 36, a = 1) 

The entries under the right-most four columns are as shown as follows: 


Irreducible Factors 
of T(x) in Octal 

Degree 
of Factor 

Period 

Index 

1243 

9 

511 

i 

2257* 

10 

341 

3 

540663* 

17 

131071 

1 
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All entries pertaining to f(x) represented as 1243 are in italics. The 
asterisk (*) appended to the degree 10 factor (2257*) and the degree 17 factor 
(540663*) indicate that 


36 

T(x) * x + x + 1 

is also the trinomial of least degree that contains each of foregoing 
factors. The degree 10 factor is nonprimitive and has period 341 (i.e., the 
order of its roots is 341) and index 3 

(i.e., (2 10 - 1 ) / 3 = 341) 

In terms of Galois Fields , let /3 be a primitive root n GF(2^) of 



3 

Thus,/3 has order 341 and is the root of an irreducible nonprimitive degree 
10 polynomial whose period is 341 and index is (3, 2^ - 1) or 3. 

The independent parameters for all entries in Appendix B are r, the 
degree of f(x), and f(x), the primitive polynomial. The f(x)*s of a given 
degree r are listed in ascending order of n, the degree of the respective T(x) 
of lowest degree which contains f(x) as a factor. T(x)*s of degree n < 70 are 
factored if they are the lowest degree trinomial containing an f(x) of degree 
12 or less. Factoring a T(x) (which was determined to be the trinomial of 
lowest degree containing f(x) of degree r as a factor) often yields 
irreducible polynomials (primitive and nonprimitive) of degrees greater than r 
which are not contained in a trinomial of lower degree . The octal 
representation of these polynomials (as well as those of the same or lower 
degree than r) are identified by an asterisk (*). 
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Example 20 


The primitive polynomial f(x) of degree LL represented by 5023 is 
contained as a factor in 

T 47,39 (x) = x ^ 7 + x39 + 1 

T 47 39 ^ x ^ * s t * ie tr i no,n i a l least degree that contains 5023 as a factor as 
determined by the algorithm presented in Example 19. Prior to dividing 
T 47 by 5023 and factoring the quotient polynomial, it is expedient to 

extract factors of low degree as follows: 

All irreducible factors of degree r are factors of 


If 


T (x) * x n + x a + 1 
n 1 a 

contains an r^ degree factor, then 

a 2 -1 -1 = a n + a a + 1 = 0 

th r 

where a is a root of the r degree factor* Let 2 - 1 * w. Then, 

a W * 1 and if 

n mod w , a mod w ^ . 

a + a +i 

contains an irreducible r C ^ degree polynomial as a factor, so does 

T (x). Simplification in extracting factors results only if w < n* 
n , a 

Specifically, 


a 47 mod 3 + a 39 mod 3 + l m Q 2 
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2 

and jg(x) does not contain x + x + 1 (the only degree 2 irreducible 
polynomial over GF(2)) as a factor. 


^7 mod 7 + ffl 39 mod 7 + ^ 


a 5 + a 4 + 1 


and a 3 + a + 1 is a factor of a 3 + a 4 + 1. Thus, x 3 + x + 1 (13) is a 
factor of T^ 7 39 (x). 

a 47 mod 15 + a 39 mod 15 + x . a 2 + a 9 + L 


and a 4 + a 3 
x 4 ♦ x 3 ♦ 1 


9 2 

+ 1 is a factor of a +01 +1 (see Reference 3). 

is a factor of T^ 7 ^(x) 

a 47 mod 31 + a 39 mod 31 + 1 - (a 2 + a + l ) 8 


Thu, 


and ^(x) does not contain a degree 5 irreducible polynomial as a factor. 

Since w = 2 - 1 > 47, the foregoing test of divisibility cannot be extended 
beyond irreducible degree 5 factors. Dividing out the irreducible factors 13, 
31, and 5023 yields the remaining degree 29 factor h(x) represented by 
7036510105. It remains to determine if h(x) is irreducible. Since 


,29 


0 CL mod h(a) 


h(x) is reducible. Repeated squaring 


a, 




,of 


29 


where each result is reduced module h(a) is readily realizable on a digital 
computer. 
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Squaring any field element in GF(2 r ) is equivalent to multiplying the 
field element (i.e. p an r-bit binary vector) by an rxr binary matrix M. Each 
term (i.e. f power of a) is squared modulo h(Cl). See Chapter 2 of Reference 4 
and Example 21. 

The aforementioned 29 th degree factor is then subjected to Berlekarap's 
factorization algorithm over GF(2) which is amenable to programming on a 
digital computer. Applying Berlekamp's factorization algorithm to the 29 
degree factor 7036510105 (which is known to be reducible) reveals it has 2 
factors. One is 1725 of degree 9 and the other is 4772721 of degree 20. The 
foregoing results are used to complete the entries in Appendix B which are 
factors of T ^ 39 ^^ * the trinomial of least degree that contains f(x) of 
degree 1_1 represented by 5023 as a factor. The entries are as follows: 


r 

Coefficient 
of f (x) in 
Octal 

T(x) 
n a 

Irreducible 
Factors of T(x) 
in Octal 

Degree 
of Factor 

Period 

Index 

u 

5023 

4 7 39 

13 

3 

7 

1 




31 

4 

15 

1 




1725 

9 

511 

1 




5023 

n 

2047 

1 




4772721* 

20 

1048575 

1 


The irreducibility of a factor of degree 19 or less is verified in Reference 7. 
The test for irreducibility for factors of degree greater than 19 is applied 
(as illustrated in Example 21). The period of each irreducible factor of 
degree 19 or less can also be determined from Reference 7. The determination 
of the period of an irreducible factor of degree m > 19 is subsequent ial ly 
discussed. 

It remains to ascertain whether each of the factors of 3 ^(x) other 
than 5023 are factors of a trinomial of degree less than T^ 39 ^^* Of the 
four factors, only 4772721* (as denoted by (*)) of degree 20 is not a factor 
of a trinomial of degree less than T^ 39 ^^ • 


4-23 




Factors 13 and 31 of degrees 3 and 4, respectively, are trinomials, and 
^45 25^ ** the tr ^ no ®i a i of least degree that contains factor 1723 of 
degree 9. 


A 47-stage SSFSR or a 47-stage ISFSR, each with a single 2-input 

Exclusive-OR gate in the feedback, is characterized by ^(x). Properly 

initialized, the SSFSR and the ISFSR can generate a PN sequence of length 7, 

15, 511, 2047, or 1,048,575. Of these, lengths 2047 (2 U - 1) and 1,048,575 
20 

(2 - 1) correspond to the most efficient use of the periodic binary 

sequence generator. Furthermore, a binary sequence whose length is the LCM of 
any subset of the five available periods could be generated. Initialization 
is governed by the factors of ^(x). 


Assume an ISFSR configuration where multiplication (or division) by a , 

a root of T47 39(x) * 0, is performed. To generate a PN sequence of length 

26 

1,048,575 (2 - 1), a suitable initial state corresponds to the product of 

the polynomial factors of 39^^ excluding 4772721, the primitive 
polynomial of degree 20. That is, 


X- (13)(31)( 1725X5023) 


a polynomial of degree 27 corresponds to a state in the desired cycle# 


Example 21 


Given the polynomial 


8 7 4 3 2 

f(x) * x + x ♦ x + x ♦ x + x+ l 


Testing whether f(x) is irreducible without resorting to tables may be done as 
follows: 
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Any element 


b,a 7 + b,a 6 ♦ . . . ♦ b.a b. 

/ o 10 


represented by [b^, b^, ... , b^, b^] may oe squared by post 
multiplication by M over GF(2). 


J 6 5 4 3 2 

a a a a a a a l 


0 

1 
l 

0 

1 
0 
0 
0 


1 

0 

0 

0 

0 

0 

0 

0 


1 

0 

1 

1 

0 

1 

0 

0 


0 

1 

1 

1 

0 

0 

0 

0 


1 

0 

1 

1 

0 

0 

1 

0 


1 

1 

0 

1 

0 

0 

0 

0 


where a is a root of f(x) ■ 0. Row 8, 7, ... , 1 in M correspond to 
polynomials 


(a 0 ) 2 , (a 1 ) 2 (a 7 ) 2 mod f(a) 


respectively. Starting with 


a- [0 000001 0 ], 


cm » a‘ 


2„ „4 „2 

a m ■ a ■ a 


2 7 256 2 8 

a m “ a - a 


Reducing each result modulo f(Q), yields 
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a 3 a 2 a l 



Since a h a mod f(a) 

8 

for a least value of n of 8, the order of a is 2 - 1 ■ 2S5 or a divisor of 
255. It may be concluded that f(x) is irreducible. However, its period is 
yet to be determined. ^ 

An r** 1 degree irreducible f(x) polynomial over GF(2) has period d where 
d divides 2 r - 1. Then, unique subsets of 


2 2 

a , a » ... .a 


reduced modulo f(x) are multiplied to form x modulo f(x). The least value 
of d for which 


a = 1 mod f(a) 
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is the period of f(x), i.e., the order of its roots. If the least value of d 
is 2 - 1, then f(x) is primitive* 

Example 22 

In Example 21, it was shown that 

8 7 4 3 2 

f(x) = X + X +X+X+X+X+1 

is irreducible* The divisors d > 1 of 255 are 

3, 5, 15, 17, 51, 85, 255 

The number of irreducible polynomials of degree 8 whose roots have order d is 
<p(d)/8. Values of 3 and 5 for d can, thus, be ruled out* Clearly, 

a d ^ 1 mod r f(a) for d = 3, 5. 


Since 


a 16 ^ a mod f(a) 

as shown in Example 21, a does not have order 15. Also, 

a 17 = a • a 16 n \ m0 d f(a) 

rules out d = 17 which could also be deduced from the fact that f(x) is not a 
self-reciprocal polynomial. The binary equivalent of 51 is 110011, and 

a 51 = a 16 a 8 a 2 a = i mod f(a) 


Thus , 


f ( x ) 


X 8 ♦ 


7 

x + 


X 4 + X 3 ♦ 


+ X + 1 


has period 51. 
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Given a primitive polynomial f(x) of degree r over GF(2) comprised of an 
odd number of terms greater than 3. No method is known of predicting the 
degree of T(x), a trinomial of lowest degree, which contains f(x) of degree r 
as a factor, A lower bound was shown to be degree r + 2 where 

T -lO ( x ^ = + x + l)f(x) 

r+2 ,a 


Among 




r-1 


there must be at least one CP. Each of the corresponding 2 r * r-bit vectors 
has at least one 1 in the first r-1 components. Among these 2 r ^ r - 1 
bit segments (where a* and cP are excluded), there must be at least one 
identical pair. Thus, an upper bound of the degree of T(x) is 2 r From 
entries in Appendix B for f(x)'s of degree r from 5 through 12, 2 r * 
represents a crude upper bound . This is shown tabular ly as follows: 


r 

Coefficient of 
f(x) in Octal 

n 

T(x) 

a 

2 r-l 

5 

57 

8 


3 

16 

6 

147 

11 


8 

32 

7 

313 

21 


18 

64 

8 

607 

27 


8 

128 

9 

163 

61 


39 

256 

10 

3117 

83 


14 

512 

11 

5667 

143 


12 

1024 

12 

1417 

171 


42 

2048 
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The following statistical model leads to a more reasonable disparity of 
estimated and actual results. Every r-bit nonzero number appears once, and 
only once, in an r-stage ISFSR (or SSFSR) cycle characterized by a primitive 
polynomial of degree r over GF(2). The 2 r - 1 numbers are, thus, uniformly 
distributed. Such an ISFSR generates random numbers although a strong 
dependence exists between a number (i.e., vector state) and its predecessor 
(see Reference 15). 


The statistical model is comprised of cells into which random placing of 

balls occurs until the first time occurrence of placing a bail into a cell 

already occupied. The two balls correspond to a Compatible Pair (CP) of ISFSR 

states. This occupancy model is lucidly presented in Section 7 of Chapter II 

in Reference 16. Following Feller's approach, (j-, j*, ... , j ) 

th ^ ^ ^ 

denotes that the first, second, ... , and n ball are placed in cells 
numbered j^, j^, ... , j^, and the process terminates on the n ^ 
step. The are integers between 1 and m = 2 r - 1. For n, only the 
values 2, 3, ... , and ra + 1 are possible. Two balls cannot occupy the same 
cell before the second step or after the (m + l)st step. 

! 

j 

Attributed to each sample point (j., j 0 , ... , j ) involving exactly n i 

-n 1 ^ n I 

balls is the probability m 


The aggregate 
corresponds to the 


of all sample points (j., j 9 , ... , j ) for a fixed n ] 

i ^ n th J 

event that the process terminates on the n step. 1 


q 


n 


P(m, n - 1) * (n - 1) 

n 

m 


(26) 


is the probability a CP is found on the n ^ step. The permutation of m 
things taken n - 1 at a time is denoted by 


P(m, n - 1) » m(m - 1) ... (m - n + 2) 
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The numbered cells j^, jj, ••• , and J n _^ can bt selected in P(m, n - 
ways. The probability q n in (26) can be expressed as 

( i ■ »)(‘ • «) ••• 
where q^ - 0 and - 1/m 

The probability that the process continues for more than n steps is 

P n = 1 - (qi + q 2 + ••• + q n > 

where p^ * 1. By induction, 

(■ 1 

For n « m, cross products can be dropped and 

, 1 + 2 + ... + (n - 1) _ , n(n - 1) 

p ~ l =1 — 

r n m 2m 


Since 


Ln(l - x) as -x for small x > 0 


where Ln denotes the natural logarithm. 


T 1 + 2 + . . . + (n - 1) _ n(n - 1) 

Ln p ~ 

n m 2m 


and 


-Ln 


p = n^/2m 
n 


D 


( 27 ) 


(28) 


(29) 


(30) 
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Consider n for which 


P l + P 2 + 


+ P n-i s 


1/2 


and 


+ p 2 + . . . + P n > 1/2 

This value of n is the median of the distribution of |P n [» The first CP is 
as likely to be found in n steps as for the process to continue beyond n steps 
for the first CP to be found. The value of n corresponding to the median of 
the distribution |p n } is closely approximated by 

n = (2m • Ln2)^*^ (31) 

(see Reference 16.) Each primitive polynomial of a given degree r in 
Appendix B may be considered as corresponding to an experiment. Each 
represents a different random number generator. The median of the value of n 
of |T^ ^(x)| Appendix B associated with primitive polynomials of a given 
degree r (5 through 12) is compared with n computed in (31). This is shown 
tabularly as follows: 



r 

Median of n 
in |T n>a (x)} 

JT2m • Ln2)0*^j 


5 

7 

7 


6 

8 

10 


7 

14 

14 


8 

20 

19 


9 

29 

27 


10 

42 

38 


11 

63 

34 


12 

82 

76 
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Note that m * 2 r - 1 and [VI denotes the smallest integer n > x. The 

computed value of n corresponding to the median of the distribution | P r | 

increases with the square root m * 2 r - 1. In determining n of T (x) 

n | d 

algorithmically, each r-stage ISFSR initially generates the identical ordered 
set of r r-bit vectors , namely, 


and a CP could not appear before step r + 3 [or r + 1 in the case where f(x) 

is a trinomial of degree r]. The statistical model does not account for 

this. Each initialization and succeeding numbers (i.e., vectors) are randomly 

selected. The low value of n corresponding to he median of the distributions 

of JT (xtf and jp } compared to the crude upper bound of 2 r * for n is 
1 n,a » f n* 

encouraging. Among primitive polynomials of degree r > 12, one would expect 

to find some contained in a T (x) where n < lOr. See Appendix B where 

n, a 

every T^ fl (x) for values of n < 70 is factored if it contained a primitive 
polynomial of degree 12 or less. Irreducible polynomial factors up to degree 
55 were found. 


A partial list of primitive polynomials from degree 13 through 19 appears 
in Appendix B. Every (row) entry lists r, the degree of f(x), f(x) of index 
1, its reciprocal x r f(l/x), and the powers of x (n and a) of T(x), the 
trinomial of lowest degree containing f(x) (or its reciprocal) as a factor. 
Another factor of T(x) is given if it is an entry that appears elsewhere in 
Appendix B or Appendix C. If the degree of the second factor is 12 or less, 
it serves as a cross reference. For example, consider the following row entry: 







Factor 

Listed 

of T(x) 
Elsewhere 


r 

f(x) of 
Index 1 

x r f(l/x) 

T(x) 
n a 

r 

Coefficient 
in Octal 

Period 

Index 

14 

70767 

73707 

33 28 

10 

2305 

1023 

i 
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T 53 28 ^ was ^ oun< * t0 be the trinomial of lowest degree to contain the 
degree H) polynomial 2305 as a factor. The period of 2305 is 1023 and its 
index is hence, 2305 is primitive. Among the entries of degree H) in 
Appendix B, f(x) represented by 2305 is listed followed by n of 53 and a of 28 
associated with T(x), i.e., 28 ^* ^ actors T 53 28 ^ inc l u< * e 

the polynomial 73707* of degree 14 whose period is 16,383 and index is 1. The 
factorization of T^^ 28 ^ to tlie P r ^ m '- t ^ ve degree 14 polynomial 
73707*. Note that the degree 14 reciprocal polynomial has a lower octal 
representation, namely, 70767. However, since 73707 is the factor of 
T 53 2 q(x)> it is italicized in the foregoing example of a listing of a 
degree 14 primitive polynomial. 


There are entries in Appendix B of primitive polynomials of degree 14 

through 19 for which no other factor of T (x) is given. Each of the other 

n ) 3 

irreducible factors are either a factor of a trinomial of degree less than n 

or the degree of each exceeds 19. In the latter cases , the single factor of 

T (x) vas found in the table of factors of square-free trinomials through 
n j a 

degree 36 in Reference 3. 


In Appendix B (as well as Appendix C), the period (and index) of 

irreducible factors of T (x) whose degrees exceed 19 were not determined 

n , a j 

in many cases. These entries are blank. 

f 

h 

i 

B. IRREDUCIBLE NONPRIMITIVE POLYNOMIALS OVER GF(2) 


Unlike primitive polynomials, there are irreducible nonprimitive 
polynomials over GF(2) which are not factors of any trinomial. Irreducible 
nonprimitive polynomials over GF(2) from degree 6 through 12 that are factors 
of trinomials are listed in Appendix C. 

Every irreducible polynomial of degree r over GF(2) where 2 r - 1 is 
prime is primitive (see Appendix A). Thus, every irreducible polynomial of 
degree 2, 3, 5, 7, 13, 17, 19 or 31 are primitive. Primes of the form 


M - 2 r - 1 
r 
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are known as Mersenne primes. A necessary, but not a sufficient condition for 
to be prime, is that r is prime. See Chapter IX in Reference 3 for a 
list of 27 of 30 known Mersenne primes. 

The Mersenne number (Reference 4) 

M n » 2 U - 1 - 2047 - 23*89 

is composite through 11 is prime. Of the 186 irreducible polynomials of 
degree 11, 176 are primitive and 10 are nonprimitive. None of the 10, degree 
11 irreducible nonprimitive polynomials (2 of period 23 and 8 of period 89) 
divide a trinomial. 

Given h(x), a degree r irreducible nonprimitive polynomial over GF(2), 
with an odd number of terms exceeding 3. The subset of elements of GF(2 r ) 
generated by a, a root of h(x) * 0, are 


2 

a> a * 


a 


d-l 


1 


r , , Ic 

The order of a is dd where d<2 - 1 and d divides 2-1 for k * r, but 

does not divide 2 r - 1 for r < k* Since 


d d - 1 - h(a) 0, 


the r distinct roots of h(x) ■ 0 are among the d roots of unity. Assume 
d M sv. Then 


v 2v (s-l)v sv , 

Ot , O , • . . , Ot >CE 1 


are among the d roots of unity. Substituting 0 for 0t v yields 


0 , 0 2 0 * " 1 


which comprise the s roots of unity. The s roots of unity are thus a subset 
of the d roots of unity if s divides d. Furthermore, every element whose 


4-34 


order s divides d must be a power of a, since an element of order s is a 
generator of the u roots of unity. If the integer s is of the form 

s - 2 U - 1 > 1 


then 


a\ 


2v 

a , 


(s-l)v sv 


are roots of 


2 U -1 


- 1-0 


and are the nonzero elements of GF(2 U ). Among the 2 U - 1 nonzero elements 
of GF(2 U ), there are 2 U * - 1 Compatible Pairs (CPs). This means that 
h(x)| the irreducible nonprimitive polynomial of degree r, is a factor of a 
trinomial if the order of a root of h(x) * 0, say d, is divisible by s of the 
form 


= 2-1 


Example 23 

The irreducible polynomial 

h(x) * + x^ + x^ + x^ + 1, 

as discussed in Examples 2 and 3, has period 21 (and index 3). Its roots are 
among the 21 roots of unity. Thus, 

£ 21 - l = £ 6 + £ 5 + /3 4 + ( 3 1 + l = o 

21 6 
and h(x) divides x - 1. The 21 roots of unity are a subset of GF(2°) 

and form a group under the defined operation of "multiplication." However, 
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the 21 root* with 0 (/3*) adjoined do not form a group under the defined 
operation of "addition." Contained within the 21 roots of unity 


ft 0 2 . 




1 


2 3 

are the nonzero elements of the subfields GF(2 ) and GF (2 ), 

2 

respectively. Each nonzero element of GF(2 ) is a root of 


2-1 3 

X - 1 - X - 1 - 0 

whereas, each nonzero element of GF(2^) is a root of 

X 2 -1 - 1 - X 7 - 1 * 0 

Let |0 W } be the set of 3 roots of unity. 

(0 W ) 3 °*° d 21 - 1 -/3° 

and 

3w = 0 mod 21 
w h 0 mod 21/(3,21) 
w = 0 mod 7 
w * 0, 7, 14 

Thus, 


1/3“ ■ /3°,/3',/3 14 l 

are the 3 solutions. From Table 1-3, 

0 7 - 0 1 1 1 1 l and /3 14 - 0 1 l l 1 0 

are a CP. 


Similarly, let{jQ y } be the set of 7 roots of unity. Then, 


< 0 y ) 7 mod 21 - 1 - 0 ° 


4-36 


and 


7y = 0 mod 21 
y = 0 mod 21/(7,21) 
y = 0 mod 3 

y ■ 3k for k ■ 0, 1 , ... , 6 


Thus , 

/3 3 . t. e 9 . e n . e 15 , 0 18 } 

are the 7 solutions. Placing the nonzero y's into cyclotomic cosets yields 

3 6 12 

9 18 13 

as shown in Tablt 1*4. Since each coset has an odd number of entries, each 

member of a CP is associated with a different coset. This is a consequence of 

3 9 

Corollary 3.1. It may be verified in Table 1-3 that (3 and /} are a CP. 

6 18 12 IS 

Hence, (3 and (3 as well as (3 and f3 (due to Corollary 3.1) are 
CPs. 

Applying the algorithm described in Example 19 to 

h(x) * + c^ + + 1 

in this example reveals that 


T 9,3 ( * ) 


9 3 

x* + x J ♦ 1 


is the trinomial of least degree that contains h(x) as a factor. It 

3 9 3 

corresponds to the CP /3 and in the subfield CF (2 ). The reciprocal 
of h(x), namely, x^h(l/x) represented by 127 contained in T^ ^(x) is an 
entry in Appendix C. 
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The order of Che roots of the degree 12 irreducible nonprimitive 
polyn nial 

12. 10. 9. 8. 7. 3. 2, ^ . 

h(x) • x ♦ x ♦ x ♦ x ♦ x ♦ x ♦ x ♦ x ♦ 1 

2 

is 585. The prime factors of 585 are 3 , 5, and 13. Since 15 is a divisor 
of 585, the nonzero elements of GF(2 ; are contained among the 585 roots of 
unity. Let|/? W } be the set of 15 roots of unity. Then 

15w = 0 mod 585 
w s 0 mod 585/(15,585) 
w = 0 mod 39 


w - 39k 

for k 

- o, 

1 14 

The cyclotomic cosets containing 

the 14 

nonzero values of w are aa follows: 

39 

78 

156 

312 

117 

234 

468 

351 

195 

390 



273 

546 

507 

429 

Dividing each entry by 39 yields 




1 

2 

4 

8 

3 

6 

12 

9 


5 10 

7 14 13 11 
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which correspond Co che 15 roocs of unicy (excluding ■ 1) in Che 

isomorphic CF(2 ) genersCed by a rooC of ♦ * ♦ 1 ■ 0 (or a rooc of iCs 
a 3 

reciprocal x ♦ x ♦ 1 » 0). Consider che 7 CPs in che 15 roocs of unicy 

4 4 

generated by a where a ♦ a ♦ 1 ■ 0, che CP a and a correspond to the CP 
1 56 39 

(3 , and /3 , respectively, and 

£ 156 +0 39 ♦ 1 - h(/9) - 0, 

Che CP a 4 and flt^ correspond to the CP and#** 2 , respectively, and 

0 156 ./3 117 . 1 - (9 12 - h(0 12 ) - 0. 

Thus, h(x) is a factor of ^^(x) and x r h(l/x) is a factor of 

T 156 1 1 7^ x ^ * the reciprocal of ^(x). There are 

<£(585) u »(3 2 M5M13) . ,, 

12 12 

degree 12 irreducible nonprimitive polynomials over GF(2) of period 585 and 
index 7. T^^ .;,(x) contains one of each reciprocal pair (12 tocal) as 

factors and a degree 12 irreducible nonprimitive polynomial of period 45 (a 
divisor of 585) and index 91. These are listed as follows: 


Irreducible Factors 
of T^55 > 39 (x) in Octal 

Degree 
of Factor 

Period 

Index 

11001 

12 

45 

91 

10245 

12 

585 

7 

11433 

12 

585 

7 

11637 ( h ( x ) ) 

12 

585 

7 

12153 

12 

585 

7 

12673 

12 

585 

7 

13113 

12 

585 

7 

13145 

12 

585 

7 

13567 

12 

585 

7 

14043 

12 

585 

7 

14177 

12 

585 

7 

14315 

12 

585 

7 

17315 

12 

585 

7 
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The reciprocal of each of Che foregoing degree 12 factor* of 
T 156 ii 7 ^ x ^ • the reciprocal of T l56 39 (x). 

Among the 15 root* of unity are 0 ® , 0 and 0 ^® , the 3 roots of 
unity. All 24 degree 12 irreducible nonprimitive polynomials whose roots have 
order 585 are factors of T 39 q 19 j(x). 

Although T^ 39 <x) is the trinomial of lowest degree derived from the 

7 CPs in the 15 roots of unity, it is not the trinomial of lowest degree to 

contain h(x), whose octal representation is 11637 , as a factor. By applying 

the algorithm illustrated in Example 19, the first CP is found to be and 
23 

/ where 

£ U -100000000000 
/ 9 23 -100000000001 


Thus, 


x 23 f x 11 ♦ 1 ■ T (x) 

23 ,ir x ' 

is the trinomial of least degree to contain h(x) of degree 12 and period 585 

11 23 

(and index 7) represented by 11637 (see Appendix C). Note that 0 and 0 
among the 585 roots of unity are not members of GF(2 ). 


Example 25 

The order of the roots of the degree 8 irreducible nonprimitive polynomial 

. / » 8 6 5 4 2 . 

h(x) -x + x ♦x ♦ x ♦ x ♦ x ♦ l 

is 85. The prime factors of 85 are 5 and 13, and 85 has no divisors of the 
form 2 U - 1. It may be verified that 

r. 11 > x 5 ♦ 1 - T^ j(x) 
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contains h(x) represented by 567 as a factor, although no subset of 85 roots of 
unity are the nonzero element of a Galois field. Furthermore, T n (x) is 
the trinomial of least degree containing h(x) as a factor (see Appendix C). 


THEOREM 4 


A sufficient but not a necessary condition for an irreducible 
nonprimitive polynomial, h(x), over GF(2) with an odd number of terms 
exceeding 3 to be a divisor of a trinomial is: 

The order of its roots d contains a factor of the form s = 2 U - 1 > 1. 


Proof 


Given h(x) of degree r over GF(2) whose roots have order d where d < 2 r - 1 

• • R k. 

and d divides 2-1 for k = r, but does not divide 2-1 for k < r. Each 

root of h(x) “ 0 generates the d roots of unity. If d = sv and 

s = 2 U - 1 > 1, 

then, a subset of the d roots of unity is comprised of the nonzero elements of 
GF(2 U ). Each element is a polynomial of degree less than r representable by 
an r-bit vector. These elements are isomorphic to the nonzero elements in 
GF(2 U ) representable as u-bit vectors. Clearly, u divides r. The 2 U - 1 
u-bit vectors contain 2 U * - 1 CPs. The isomorphic 2 U - 1 r-bit vectors 
also contain 2 U * - 1 CPs where a compatible pair of r-bit vectors are 
isomorphic to a compatible pair of u-bit vectors (see Example 6). 

The d roots of unity can contain CPs and no subset of elements that 
comprise a Galois field (see Example 25). 


Q.E.D. 


4-41 



COROLLARY 4.1 


i k 

If j8 J and (3 are a CP among the d roots of unity, then 

^2j mod d ^2k mod d 


are a CP contained in the d roots of unity. 


Proof 


h(£)|/3 k + /9 j 


♦ 1 


and 


Thus, 


since 


h(x) x k + x^ + 1 


h(x) (x k + x - * + l) 2 * x 2k + x 2 ^ + 


[g(x)] 2 = g(x 2 ) 


where g(x) is any polynomial over GF(2). Then, 


£ 2k mod d flnd g2j mod d 


are each members of the d roots of unity 


/3> /3 2 /3 d ' 1 , /3 d = l 


which form a group under "multiplication" where 


£ w py =■ ^g< w+ y) mod d 
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Since 


h(x) |x 2k + x 2 ^ + 1 

h</9) * /3 2k raod d + /9 2j mod d ♦ l = o 


and 


p2k mod d 


and /9 2 J raod d 


are a CP. 


Q « E « D « 


Example 26 

The cyclotomic cosets associated with and /3 1 *, where /3 is a root 
of h(x) * 0 given in Example 25, respectively, are: 

5 10 20 40 80 75 65 45 

11 22 44 3 6 12 24 48 

* k l 

The entries in each cf the 8 columns are associated with a CP (/3 , )9 J ) 

which corresponds to a trinomial divisible by 

h(x)=x^+x^+x^+x^+x^+x+ 1 

representable by 567 . The square-free trinomials divisible by 567 are listed 
in ascending order of degree as follows: 


11 


5 

1 

X 

+ 

X 

+ 

40 


3 

1 

X 

+ 

X 

+ 

48 


45 

1 

X 

+ 

X 

+ 

65 


24 

1 

X 

+ 

X 

+ 

75 


12 

1 

X 

+ 

X 

+ 


4-43 



The additional square-free trinomials a*"e another source of trinomials of 
lowest degree that contain an irreducible polynomial of degree greater than 
19, e.g., the factors of 


40 


♦ x 3 ♦ 


1 


are 567 (i.e., h(x) of degree 8 and period 85 and 54556457063, an irreducible 

32 

polynomial of degree 32, The factors of 2 -1 are 

( 2 2 - 1 ) ( 2 2 + 1 ) ( 2 4 + 1 ) ( 2 8 + 1 ) ( 2 16 ♦ 1 ) 

3 5 17 257 65,537 

32 

and the period of the degree J2 irreducible polynomial divides 2 - 1. 

Each of the prime factors iay be expressed as 


for 


2 

F = 2 Z +1 
n 

n = 0, 1, 2, 3, 4 


These are known as Fermat primes. Every F^ Fermat number where n >4, whose 
character has been determined to date, is composite. 

It may be verified that the trinomial of least degree that 

contains the degree 32 irreducible polynomial 54556457063 over GF(2) as a 
factor. 


The following theorem and corollaries are due to Golomb (see Reference 3), 
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THEOREM 5 


A self-reciprocal polynomial over GF(2), h(x), divides a trinomial only 
if the three roots of unity ft * , and (3® for some a are a subset of 

the elements generated by (3 , a root of h(x) = 0. 

Proof 


Assume 


h(x) x 11 + x a + 1 


Then, 


x r h( 1/x) 


n , n-a 
x + x 


1 


Given 


h(x) = x r h(l/x) 


Then, 


h(x) (x n + x a + 1) + (x n + x n a +1) 


n-a 


x 


+ 


a 


x 


Therefore, 


h( x) 


a, n-a A a v 
x (x + x ) 


( n 
(x 


+ x a + 


1 ) 


2 a a ^ . 
x + x + 1 


and 


h(/8) • /3 2a ♦ /3 a + 1=0 
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The elements /3^ a and /3 a are a CP, and the 3 roots of unity 


0 a ./3 2a ,/? 3a - 1 

are a subset of the elements generated by /3. The period of h(x) must, 

2 

therefore, contain 3 (i.e., 2 - 1) as a factor. 

Q * E • D • - 


COROLLARY 5.1 

3 3 2 

No trinomial is divisible by both x + x + 1 and x + x + 1. 

Proof 

u(x) = (x^ + x + 1) (x^ + x^ + 1) * x^ + x^ + x^ + x^ + x^ + x + 1 

a self-reciprocal polynomial whose roots have order 7, and 7 is not divisible 
by 3. 

The elements generated by /3, a root of u(x) * 0 are 


i of Z? 1 

c 5 

c 4 

c 3 

c 2 

C 1 

c 0 

0 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

1 

0 

2 

0 

0 

0 

1 

0 

0 

3 

0 

0 

1 

0 

0 

0 

4 

0 

1 

0 

0 

0 

0 

5 

1 

0 

0 

0 

0 

0 

6 

1 

1 

1 

1 

1 

1 

- 

0 

0 

0 

0 

0 

0 

1 


and no CP is among them. 


Q.E.D. 
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COROLLARY 5.2 


No trinomial is divisible by 

4 3 2 

h(x) * x + x + x +x+l 

an irreducible self-reciprocal polynomial whose roots have order 5. 
Proof 


Since 3 is not a divisor of 5, 

3 5 

x - 1 does not divide x - 1 

and all 3 roots of unity are not a subset of the 5 roots of unity. 

The 5 roots of unity generated by /?, a root of h(x) * 0, do not contain a 
CP. 

Q.E.D. 

Example 27 

There are 6 self-reciprocal irreducible polynomials of degree 18 whose 
roots have order 171 (and index 1533). See Table 1-5. 

Let j/3 a } be the set of 3 roots of unity which are a subset of the 171 
roots of unity. 


gga^3 mod 171 


1 * 0 


and 


3a = 0 mod 171 

a = 0 mod 171/(171/3) 

a = 0 mod 54 

a - 0, 57, 114 
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Thus, 


h(/3) » /3 114 + / S 57 + 1-0 


and 


. , J 114 . 57 A . 

hCx) x + x +1 

where h(x) is any one of the 6 self-reciprocal irreducible polynomials of 
degree 18. Thus, ^(x) 1148 ^ degree 18 factors when multiplied 

together over GF(2) yields a degree 108 polynomial. 

The remaining degree 6 self-reciprocal polynomial is one of the following: 


Self-Reciprocal Polynomials 


Binary Coefficients of 
Factors 


( 1 ) 1 
( 2 ) 1 

(3) 1 

(4) 1 


0 0 

0 1 

1 0 

1 l 


1 0 
1 1 
1 0 
1 1 


0 1 
0 1 
1 1 
1 1 


irreducible 

( l 1 1 ) ( 1 1 1 1 l ) 

( l 1 1 ) ( 1 l 1 ) ( 1 1 1 ) 

( 10 1 1 ) ( 1 10 1 ) 


Polynomials (2) and (4) can be ruled out due to Corollaries 5.2 and 5.1, 
respectively. Since Tj^ jy(x) i® square-free, polynomial (3) cannot be a 
factor. Thus, 


x 6 . x 3 . 1 


with period 9 (and index 7) is the remaining factor* The irreducible factors 

of T liy n (x) are listed as follows: 

114,57 
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Irreducible Factors of 
Tn 4 t 57 (jc) in Octal 

Degree 
of Factor 

Period 

Index 

111 

6 

9 

7 

1055321 

18 

171 

1533 

1167671 

18 

171 

1533 

1315315 

18 

171 

1533 

1331155 

18 

171 

1533 

1505213 

18 

171 

1533 

1635347 

18 

171 

1533 


Note that and /3^ is the only CP among the 171 roots of unity. This 
is independent of the generation of the 171 roots of unity. Thus, applying 
the algorithm to each of the 6 self-reciprocal polynomials of degree 12 yields 
T 114,54^ as the tr ^ nom i al of least degree containing the given 
self-reciprocal polynomial as a factor. 

The polynomial h^(x) represented by 1055321 is listed in Appendix C of 
Reference 6 appended to its index 1533. The minimal polynomial h ^/J 5 ) * 0 
was determined by a computer program to be h^Cx) represented by 1167671, 
etc. The 6 self-reciprocal polynomials of degree 18 given in the foregoing 
table are listed in Reference 7. However, they ate erroneously classified as 
primitive. 


Golomb, in Reference 17, discusses irreducible polynomials, 
synchronization codes, and primitive necklaces in the context of cyclotomic 
algebra. 


SECTION V 


VERY LARGE SCALE INTEGRATED CIRCUIT CONSIDERATIONS 


Switching elements comprise less than 10% of the active chip area of a 
Very Large Scale Integrated (VLSI) circuit chip. Interconnections make up the 
balance. 

A static shift register is made up of identical stages or cells. 

Identical cells lead to a maximally regular topology in a VLSI layout known as 
a floor plan. The geometric design of one cell is replicated to a desired 
number to form a cascade. Each cell is a clocked memory element called a 
static flip-flop. The flip-flop is a bistable device capable of assuming one 
of two state-values. 

A functional logic diagram of a JK flip-flop is shown in Figure 5-1. The 
state of the flip-flop is defined by its assertion output q at a particular 
CPI. The negation output is q (the complement of q). 

The logic inputs are J and K. A change in the state of the flip-flop can 
only occur after the application of a clock pulse denoted by Cp. The logical 
behavior of the JK flip-flop is reflected in the following state table: 
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le JK Flip-Flop 


J and K represent pres ent inputs, and q represents the present 
(assertion) output or state of the flip-flop. Let k denote a CPI, the time 
between two consecutive clock pulses. Then, 

q(k) — ► q(k+l) ■ Q 

where Q denotes the state the flip-flop assumes after the application of a 
clo.k pulse. Q is referred to as the next (assertion) output or state of the 
flip-flop. The next state Q is a Boolean function of J, K, and q. Expressed 
in minimal (logical) sum of (logical) products form 

Q « Jq V kq (31) 

Juxtaposition denotes the logical product or the AND operation (e.g., K 
AND q is expressed as Kq). The symbol V denotes the OR (i.e., Inclusive-OR 
operation). A detailed presentation on switching (Boolean) functions and 
clocked memory elements appears in Reference 18. The reader is cautioned to 
note that the symbols for the OR and Exclusive-OR operations in Reference 18 
differ from those in this report. Expression (31) is the characteristic 
function of the JK flip-flop. It is a Boolean difference equation where time 
dependency is implied. 

Let J • K in (26). Then, 


J » K 

and Q - Kq V Kq « K 

Thus, when inputs J and K are complementary, the next state Q, after the 

application of a clock pulse Cp, is the state-value of K prior to application 

of Cp. The assertion output, in effect, "copies" the state-value of K. The 

behavior of the JK flip-flop under the condition J equals K is that of a D 

flip-flop (i.c., a delay flip-flop). Let q. and q. denote the assertion 

th 1 1 

and negation output of the i ‘ JK flip-flop in a cascade. Let J. + ^ and 
^i+1 ^ enote t * ie respective inputs to the (i + l)th JK flip-flop whose 
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assertion output is q.^. Connecting q^ to K^ and q^ to J^ results in 
shifting the content of the i th flip-flop (i.e., q^) to the (i ♦ l)th 
flip-flop upon the application of a Cp. 

The JK flip-flop in Figure 5-1 is comprised of 8 NOR (OR- NOT) gates and 
one inverter for developing a two-phase clock. The JK flip-flop is made up of 
two clocked cross-coupled NOR gates called latches. One serves as a master 
and is clocked by ^ ■ Cp. The slave is clocked by ^ ” Cp (the 
complement of Cp). The state of the master is determined by the J and K 
inputs when Cp * 0, while the inputs to the slave are disabled Cp ■ 1. The 
master (clocked latch) assumes a stable state prior to the time Cp becomes 1 
as Cp becomes 0. The state of the slave then assumes the state of the roaster 
during which time the inputs to the master (J and K) are disabled. Feedback 
from the assertion output q to the NOR gate, which has J and Cp as other 
inputs and feedback from the negation output q to the NOR gate, which has K 
and Cp as other inputs provide input gate steering. Gate steering allows a 
state-value of 0 to simultaneously be applied to the J and K input. < The J 
input when at state-value 0 (and K ■ 1) is a set input which causes the 
assertion output q to assume a state-value of 1 (via the slave). Whereas, the 
K input when at state-value 0 (and J ■ 1) is a clear (or reset) input which 
causes the assertion output, q, to assume a state-value of 0 (via the slave). 
When J and K are both at state-value 0, the state of the JK flip-flop 
changes. From (26) 


Q - Jq V Kq 
■ Oq V Oq ■ q 

Thus, J * K ■ 0 is a toggle input which is not employed in a shift register 
configuration. A J * K * 1 cause no change in q. A condensed state table of 
a 0-enable JK flip-flop is listed as follows: 
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J K 

0 0 
0 1 
1 0 
1 1 


Q 


q 


l 

o 

q 


The second and third entries where J and K are complementary correspond 
to D flip-flop behavior where Q copies the K input. and in 

Figure 5-1 are asynchronous set and clear inputs, respectively. S^, when at 
state-value 1 sets the flip-flop, and when at 3tate-value l resets the 
flip-flop. 


s dc r dc 


0 


in a constraint. That is, a state-value of 1 should not be applied to 
and simultaneously since q will assume an indeterminate state-value 
(i.e., 0, a 0 or a 1), Both S DC and R^ 4 override the clocked logical 
inputs J and K. The S^, and R^. inputs with added control logic provide a 
means for on-chip initialization of each flip-flop. 


Another configuration of the 0 enable JK flip-flop where J * K * T is of 
interest. From (26) 


Q ■ 7q V Tq * T + q 

■ 1 ♦ T ♦ q (32) 

The next state Q is the complement of the Exclusive-OR of the T input and 
the present state q of the flip-flop. Connecting J and K inputs together 
results in a trigger or T flip-flop whose characteristic function is linear. 

In a subsequent report, it will be shown that the feedback of an SSFSR 
characterized by a trinominal may be reduced to a wire when the register 
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portion is made up of a combination of D and T flip-flops. The conditions 
under which the properties and the length of a given periodic sequence is 
preserved will be discussed. 

An N channel Metal-Oxide-Semiconductor (NMOS) circuit of the 0-enable JK 
flip-flop appears in Figure 5-2. Each transistor is an N channel 
Metal-Oxide-Semiconductor Field-Effect Transistor (MOSFET ) . Those operating 
in the depletion mode serve as pull-ups and are labeled MD. Those operating 
in the enhancement mode are served as pull-downs and are labeled ME. The 
optimal length-to-width ratios of the gate geometries are discussed in 
Reference 19. The NOR gate configuration was chosen because its delay time 
for falling transitions is decreased as more or its inputs are active. Added 
stray capactance does, however, offset this decrease. 

A functional logic diagram of an on-stage SSFSR characterized by 

T (X) = X n + X 3 + 1 
n,a 

is given in Figure 5-3. Clock and initialization circuitry is omitted. The 
two-level logic function comprised of three NOR gates is effectively a 2-input 
Exclusive-OR circuit. Thirty transistors comprise the NMOS cell (i.e., JK 
flip-flop) in Figure 5-2. Intracell connections are highly localized. 

Whereas, intercell connections are simply two wires due to the fact that the 
shift register is a serial device. The celluarity of a shift register and the 
serialization of intercell connections leads to topological regularity 
amenable to VLSI chip designs. 

Introducing feedback to the shift register enchances its usefulness 
beyond all expectations of the early 1950s when independent discoveries were 
surfacing (Reference 3). The combinational logic in feedback of a shift 
register, however, adversely affects the topological layout of a VLSI design. 
This is particularly true in a SSFSR where a two-level linear-logic function 
grows sharply with the number of arguments (Reference 18). A feedback network 
with a single 2-input modulo 2 summer (i.e., Exclusive-OR gate) is the least 
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Figure 5-2. NMOS Circuit of a Static 0-Enable JK Flip-Flop 
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Figure 





complex without resulting in cycles (of states) of trivial length. Isomorphic 
SSFSR and ISFSR with such a feedback function are of identical complexity in 
terms of transistor count and propagation delay. 

This report discusses the embedding of the behavior of an r-stage shift 
register with linear-logic feedback into that of an n-stage shift register 
with a single 2-input modulo summer in its feedback in Section IV. The sole 
purpose is to realize VLSI architecture of maximal regularity (i.e., identical 
cells) with intercell communications serialized to a maximal degree . 
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SECTION VI 


SUMMARY 


Feedback shift registers have proven to be efficient periodic binary 
sequence generators. Polynomials of degree r over a Galois Field 
characteristic 2 (GF(2)) characterize the behavior of shift registers with 
linear-logic feedback. Such FSRs are amenable to analysis and synthesis. 
Furthermore, the synthesis of shift registers with nonlinear feedback is often 
the result of "adding" nonlinear terms to a linear recurrence relation. See 1 
Reference 23 and Chapter VI entitled "Nonlinear Shift Register Sequences" in 
Reference 3. 

Application of periodic binary sequences include random number generation 
(Reference 15), spread spectrum communications (Reference 20), and radar 
ranging (a forerunner of spread spectrum communications (Reference 11)), and 
VLSI testing (References 21 and 22). 

Other applications of FSRs include encryption and decryption 
(Reference 23), algebraic error-detection and error-correction encoding and 
decoding (References 4 and 6), and FSR synthesis of sequential machines 
(Reference 24). 

The vast intrinsic combinatorics of an FSR accounts for its varied and 
significant applications. This reports deals solely with shift registers with 
linear-logic feedback (the SSFSR and ISFSR) characterized by polynominals over 
GF(2). The objective is the algorithmic determination of the trinomial of 
lowest degree, when its exists, that contains a given irreducible polynomial 
over GF(2) as a factor. It was proven that every primitive polynomial of 
degree r is a factor of 2 r * - 1 trinomials and the one of lowest degree is 
square-free. A sufficient, but not a necessary condition, was proven for a 
nonprimitive irreducible polynomial to be a factor of a trinomial. Methods 
for determining the initial state of a SSFSR and ISFSR required to generate 
the periodic sequence associated with a factor of the trinomial was given. 
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A measure of complexity of a binary periodic sequence is the length of 
the shift register with linear-logic feedback which, when properly 
initialized, can generate the sequence (see References 4 and 25). It is 
proposed that a measure of complexity of an irreducible polynomial is the 
degree of the trinomial of least degree, if it exists, that contains the 
irreducible polynomial as a factor. 
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NUMBER-THEORETIC FUNCTIONS 


A number-theoretic function is any function that is defined over 
positive integral arguments- A number-theoretic function f(m) is 
multiplicative if 


f(ab) * f(a)f(b) whenever (a,b) * 1 
The prime-power factorization of a positive integer m > 1 is 

"-rK i 

i*l 


where k and e^ are positive integers and p^ prime integers. A prime is 
defined as an integer p > 1 that is divisible by 1 and p only. Thus, a 
multiplicative number-theore t ic ^unction over m may be expressed as 


since 




1 for i * j 


The Euler-phi function </>(m) is defined as the number of positive 
integers no greater than m that are relatively prime to m. Furthermore, <p(m) 


A- 1 


k 

is multiplicative. The iui.eger8 no greater than p that are not relatively 
prime to p are those that contain p as a factor, namely, 

- k-1 

P* *P P 

k-1 

There are a total of p such integers. Therefore, 

z k., _ k k-1 _ k-1, 

<p(p ) ■ p - p * p (p-1) 


The integer 1 is neither a prime nor a composite. To be complete, is 

defined to be 1. 


In general, 


(pirn) “ 



for m * 1 
for m ■ p 


for m 


n 


e . 

l 


As discussed in Section I, the number of primitive polynomials of degree 
r over GF(2) is 


<P(2 T - l)/r 

Also, the number of irreducible nonprimitive polynomials of degree r and 
period d over GF(2) is <p(d)/r. The value of d is such that d < 2 -1 and d 

Lr lr 

divides 2-1 for k * r, but does not divide 2-1 for k < r« 

The set of all cosets (proper and improper) relative to the 
multiplicative subgroup 


{ 


i, 


2, 4, 


2 


r- 


1 


} 
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correspond to the 2 r - 1 roots of unity arranged into cyclotomic cosets . 
The number of cyclotomic cosets is 


N 


c 



d|r 


>r/d 


- 1 


where d|r denotes H d divides r. M The summation is taken over all d > 1 that 
divide r. 


Another multiplicative number-theoretic function of interest is the 
Mbbius function denoted by /i(m). The MSbius function is defined by 


/i-(m) « 



if m - 1 
2 

if a | m for a > 1 

if m ■ p^p 2 ... where p^ are distinct primes 


The Mobius function shows up frequently in number theory, particularly in the 
Mobius inversion formula. If f is any number-theoretic function, not 
necessarily multiplicative, and 


F (m) - 7>(d) 
d |m 


Chen 


flm) 


^^F(d)ft(n/d) ■ ^^F(n/d)/x(d) 
d | m d | m 


The number of irreducible polynomials of degree r over GF(2) is where 


2 



d 


For r ■ 6, 1^ is determined recursively. Divisors of 6 are 1, 2, 3, and 6. 
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2 

2 - 2 ♦ 21 - 

3 1 

2 ■ 2 + 3I 3 

2 6 ■ 2 ♦ 2 ♦ 6 ♦ 6I 6 


2 

1 

2 

9 


A closed form for I follows from applying Che Mobius inversion 
For 


F(r) - 2 r and f(d) ■ dl. 

a 


rl^ ■ ^jr^2 I ^ t fi(d) and 
d|r 



d|r 


For r ■ 6, 


fid) - 1 , ^( 2 ) - - 1 , m ( 3 ) » - 1 , m ( 6 ) -1 
T 6 - | ( 2 6 - 2 3 - 2 2 ♦ 2 ) - 9 


The number-theoretic functions for determining the number 
and irreducible polynomials over GF(2) is applicable to GF(p). 
primitive polynomials of degree r is a subset of over GF(p). 



Equality arises only for the case of GF(2) when 2 r - 1 is prime, 
is invited to see References 3, 4, and 17 for detailed presentat 
/x(d), and the Mobius inversion formula. 
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The reader 
ions on <p(m ) , 
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9 

511 

1 





2503* 

10 

1023 

1 





4441 

11 

mi 

1 





46215* 

14 

16383 

1 


em 

53 

17 

23 

4 

15 

1 





mi 

11 

mi 

1 





inn* 

12 

4095 

1 





615627213* 

26 




im 

54 

25 

13 

3 

7 

1 





2047 

10 

1023 

1 





4107 

11 

2£4X 

1 





51303* 

14 

16383 

1 





232031* 

16 

13107 

5 


B-l 1 


CDEFF. OF 
r f(x) IN 

OCTAL 

T<x> 

a • 

IRREDUCIBLE 
FACTORS OF T(x) 
IN OCTAL 

DEGREE 
OF FACTOR 

PERIOD 

INDEX 

u sm 

55 

10 

1211 

11 

2047 

1 




57753241343 2723* 

44 



4475 

54 

41 

57 

5 

31 

1 




1725 

7 

511 

1 




4421 

11 

2242 

1 




37157355273* 

31 

2147483647 

1 

4111 

51 

11 

23 

4 

15 

1 




4141 

11 

mi 

1 




112443714350031* 

42 



7237 

58 

55 

13 

3 

7 

1 




7237 

11 

mi 

1 




731154217564031* 

44 



4111 

59 

25 

7 

2 

3 

1 




4111 

11 

2242. 

1 




11103* 

12 

1365 

3 




3 12004430753* 

34 



4111. 

59 

29 

13 

3 

7 

1 




4111 

11 

mi 

1 




26761* 

13 

8191 

1 




40561341405* 

32 



4603 

61 

43 

IS 

3 

7 

1 




73 

5 

31 

1 




1563 

9 

511 

1 




mi 

.U 

2242 

1 




75273* 

14 

16383 

1 




2041035* 

19 

524287 

1 

6121 

64 

47 

7 

2 

3 

1 




15 

3 

7 

1 




6121 

11 

2047 

1 




17141473700110531* 

48 



6221 

65 

6 

13 

3 

7 

1 




2377* 

10 

1023 

1 




6221 

11 

2242 

1 




60575* 

14 

16383 

1 




1062067767* 

27 
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COEFF. OF IRREDUCIBLE 

r £(*) IN T(x) FACTORS OF T(x) DEGREE 

OCTAL ax IN OCTAL OF FACTOR PERIOD INDEX 


4141 

65 

7 7 

2 

3 



771 

8 

85 



4141 

11 

mi 



514561* 

17 

131071 



110**74323* 

27 


4563 

65 

28 7 

2 

3 



4563 

U 

mi 



307036250332170^31* 

52 



4145 65 40 7 

23 

31 

414A 

404454203214625* 

4053 68 3 4053 

452075* 

22540240100253* 


2 

3 

1 

4 

15 

1 

4 

15 

1 

U 

2047 

1 

44 



U 

mi 

t 

*. 

17 

131071 

1 

40 




5537 68 55 72 

5112 U 

3751431316172617015* 55 


3 

mi 


l 

1 


4473 69 21 111 6 

4421 U 

20342647* 22 

10001101111* 30 


9 

mi 


7 

1 


4215 6 > 41 


271 

7 

127 

4215 

n 

2047 

4361545* 

20 


26622761641* 

31 

2147483647 


1 

1 

1 


f(x) of 


f(x) of 

INDEX 1 a 

a 

r INDEX 1 a 


11 4055 

71 

14 

11 5607 

93 

14 

4173 

71 

47 

5177 

93 

61 

4415 

?: 

56 

6417 

94 

83 

7047 

71 

68 

5263 

96 

61 
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H|H 



t 

f(x) of 
INDEX 1 

n 

a 


f<x) of 
r INDEX 1 

n 

a 


11 

42S1 

72 

IS 


11 4655 

97 

90 



6153 

73 

17 


6037 

99 

62 



4451 

73 

34 


4027 

100 

35 



6163 

73 

40 


5403 

101 

79 



5155 

75 

72 


4577 

101 

82 



4617 

79 

39 


5247 

103 

18 



6507 

79 

61 


6637 

107 

85 



5747 

81 

38 


5623 

109 

1 



7317 

82 

17 


4143 

109 

27 



5265 

82 

23 


4707 

111 

106 



4533 

86 

9 


5463 

117 

25 



5513 

88 

75 


6263 

133 

39 



4745 

89 

87 


6233 

142 

99 







5667 

143 

12 



CDEFF. OF 



IRREDUCIBLE 





r 

f(x) IN 

T(x) 

FACTORS OF T(x) 

DEGREE 





OCTAL 

n 

a 

IN OCTAL 

OF FACTOR 

PERIOD 

INDEX 


12 12067 

19 

7 

253* 

7 

127 

1 




12067 

12 

40£i 

1 

10663 

19 

13 

217* 

7 

127 

1 




10663 

12 

40££ 

1 

12753 

25 

21 

45 

5 

31 

1 




573 

8 

85 

3 




12753 

12 

409£ 

1 

12515 

26 

1 

7 

2 

3 

1 




15 

3 

7 

1 




1275* 

9 

511 

1 




12515 

12 

4095 

1 

10353 

31 

29 

7 

2 

3 

1 




13 

3 

7 

1 




10353 

12 

409? 

1 




60147* 

14 

16383 

1 

mu 

34 

5 

7 

2 

3 

1 




51 

5 

31 

1 




mn 

12 

4095 

1 




163767* 

15 

32767 

1 




COEFF. OF IRREDUCIBLE 


f(x) IN 
OCTAL 

T(x) 

a a 

FACTORS OF T(x) 
IN OCTAL 

degree 

OF FACTOR 

PERIOD 

INDEX 

mi 1 

37 

3 

15 

3 

7 

1 




345 

7 

127 

1 




mil 

12 

4091 

1 




120403* 

15 

32767 

1 

12165 

37 

30 

mu 

11 

4011 

1 




250303445* 

25 

33554431 

1 

12255 

38 

35 

271 

7 

127 

1 




551 

8 

255 

1 




mi* 

11 

2047 

1 




12255 

12 

4095 

1 

11121 

42 

17 

mn 

12 

4095 

1 




1106651 5603* 

30 



10737 

47 

13 

7 

2 

3 

1 




10737 

12 

4021 

1 




151421301615* 

33 




11643 

49 

18 

31 

4 

15 

1 




1713 

9 

511 

1 




7113 

11 

2047 

1 




11643 

12 

4095 

1 




31273* 

13 

8191 

1 

11313 

50 

9 

11313 

12 

4095 

1 




4502237720127* 

38 



11163 

53 

16 

7 

2 

3 

1 




73 

5 

31 

1 




11163 

12 

4095 

1 




277357101057* 

34 



12727 

53 

17 

23 

4 

15 

1 




65 57* 

11 

2047 

1 




12727 

12 

4095 

1 




615627213* 

26 



16317 

55 

1 

357 

7 

127 

1 




16317 

12 

4095 

1 




1264522723457* 

36 




OOEFF. OF 
f(z) IN 
OCTAL 

T(x) 

n i 

IRREDUCIBLE 
FACTORS OF T(x) 
IN OCTAL 

DEGREE 
OF FACTOR 

PERIOD 

INDEX 

imi 

55 

8 

7 

2 

3 

1 




235 

7 

127 

1 




11S11 

11 

4095 

i 




53043 

14 

5461 

3 




7054651* 

20 

95325 

11 

mi i 

58 

49 

ism 

11 

4095 

1 




2161250565777231* 

46 



U.14J 

60 

25 

11147 

12 

1095. 

1 




13223 

12 

819 

5 




13611* 

12 

4095 

1 




14227* 

12 

4095 

1 




16273* 

12 

4095 

1 

mu 

60 

25 

11147* 

12 

4095 

1 




13223 

12 

819 

5 




13611* 

12 

4095 

1 




*4227 

12 

4095 

1 




16273* 

12 

4095 

1 

um 

60 

35 

lion 

12 

40£i 

1 




14455 

12 

819 

5 




15467* 

12 

4095 

1 




16311* 

12 

4095 

1 




16443* 

12 

4095 

1 

15461 

60 

35 

11075* 

12 

4095 

1 




14455 

12 

819 

5 




nm 

u 

4095 

1 




16311* 

12 

4095 

1 




16443* 

12 

4095 

1 

uog? 

64 

1 

23 

4 

15 

1 




11045 

12 

1365 

3 




11067 

11 

1021 

1 




11441* 

12 

4095 

1 




11463 

12 

819 

5 




11515* 

12 

4095 

1 



COEFF. OF IRREDUCIBLE 


r 

f(x) IN T(x) 

FACTORS OF T(x) 

DEGREE 




OCTAL n a 

IN OCTAL 

OF FACTOR 

PERIOD 

INDEX 


12 11515 

64 

1 

23 

4 

15 

1 




11045 

12 

1365 

3 




11067* 

12 

4095 

1 




11441* 

12 

4095 

1 




11463 

12 

819 

5 




11515 

12 

4095 

1 

12007 

64 

27 

12007 

12 

4095 

1 




252442144723171333* 

52 



10231 

64 

63 

31 

4 

15 

1 




10231 

12 

mi 

1 




12211 

12 

1365 

3 




13131* 

12 

4095 

1 




14631 

12 

819 

5 




16611* 

12 

4095 

1 

10605 

67 

61 

13 

3 

7 

1 




10605 

12 

4095 

1 




55317733* 

23 

8388608 

1 




4017247741* 

29 




f(x) of 

T(x) 


f(x) of 

T(x) 

INDEX 1 

s a 

r 

INDEX 1 

n 


12 16027 

70 

29 

12 13275 

103 

56 

15437 

71 

26 

14433 

103 

57 

13677 

71 

41 

10527 

104 

43 

11435 

71 

52 

10123 

107 

97 

17057 

72 

19 

16047 

109 

76 

12247 

73 

38 

11477 

109 

91 

12323 

78 

53 

13503 

115 

2 

12435 

79 

40 

15033 

117 

80 

10173 

80 

43 

14357 

119 

44 

15677 

83 

19 

10407 

125 

94 

14573 

83 

73 

16237 

129 

48 

10443 

85 

9 

10473 

135 

53 

10553 

85 

67 

112 71 

136 

1 

14613 

86 

7 

12735 

145 

108 

13663 

87 

72 

12135 

152 

37 

14717 

87 

72 

15527 

153 

75 
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f(x) of 

T(x) 



f(x) of T(x) 


r 

index i 

n 

a 

r 

INDEX 

1 a 

a 


12 

10517 

91 

19 

12 

13107 

161 

84 



10437 

91 

64 


12147 

161 

107 



11471 

93 

34 


10321 

162 

151 



10151 

93 

52 


14127 

163 

143 



12417 

99 

93 


14747 

164 

113 



15053 

101 

67 


11417 

171 

42 



12623 

102 

13 











FACTOR OF T(x) 

LISTED ELSEWHERE 


H 

O 


T(x) 



COEFF. IN 



r 

INDEX 1 

x r f(l/x) 

n 

a 

r 

OCTAL 

PERIOD 

INDEX 

11 

25627 

35165 

16 

i 






mu 

37151 

1& 

i 






21135 

27221 

io 








26161 

21 

is. 

& 

411 

m 

1 


20547 

31641 

33. 

1 

£ 

515 

m 

1 


23737 

37371 

23 

1 






2470? 

30345 

£1 

1 

U 

5111 

3041 

1 


30057 

36403 


6 

£ 

113. 

13. 

2 


23005 

24031 

31 

£ 






24Q61 

21405 

31 

11 






25775 

2im. 

3i 

6 

16 

266745 

61515. 

1 


21453 

3 2461 

3£ 

1 

£ 

1437 

Ill 

1 


22075 

27411 

31 

1 

14 

52547 

5461 

3 


2071 ? 

26341 

31 

1 

16 

337377 

4369 

11 


24513 

32245 

31 

21 

10 

3121 

341 

1 
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FACTOR OF T(x) LISTED ELSEWHERE 


f(x) of T(x) COEFF. IN 


INDEX 1 

x r f(l/x) 

fl 

A 

r 

OCTAL 

PERIOD 

INDEX 

25333 

33325 

11 

1 

u 

602*7. 

11M1 

1 

34627 

11141 

u 

11 

11 

1211 

2M1 

1 

2021? 

32101 

21 

11 

ii 

5477 

2041 

1 

24£H 

37145 

41 

11 

u 

4441 

2047 

1 

11271 

33523 

41 

11 

11 

1164? 

4fiii 

1 

21557 

?6661 

50 

31 

12 

16226 

221 

U 

21755 

26761 

ii 

21 

11 

4511 

2047 

1 

30357 

36703 

63 

21 

12 

13377 

819 

5 

66673 

63777 

16 

1 





45627 

72351 

12 

2 





55753 

65755 

21 

11 

10 

2767 

1021 

1 

40275 

57201 

26 

11 

£ 

1021 

511 

1 

$0147 

71403 

31 

29 

12 

10353 

4095 

1 

42335 

52621 

32 

n 

18 

1206221 

262143 

1 

6Q367 

73603 

35 

1 

13 

25333 

8191 

1 

51145 

11441 

31 

11 

21 

12624165 

2O9715I 

1 

42*41 

51321 

38 

11 





46215 

54231 

41 

41 

IS . 

25M 

1023 

1 

70767 

73707 

11 

21 

10 . 

2305 

1023 

1 

51303 

60645 

11 

21 

11 

4107 

2047 

1 

53623 

62365 

61 

1 

10 

2363 

1023 

1 

67257 

75273 

61 

41 

11 

4603 

2047 

1 
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FACTOR OP T(x) LISTED ELSEWHERE 
f(x) of T(x) OOEFF. IN 

t INDEX 1 x r f(l/x) n a r OCTAL PERIOD INDEX 


i± 

57503 

6Q212 

62 

1 

12 

v 2121 

1021 

1 


40473 

am 

62 

21 

11 

12211 

585 

2 

u 

1PPPP? 

140001 

12 

1 






mm 

100201 

12 

4 






100201 

100401 

12 

1 






134567 

167235 

li 

1 






104657 

172621 

IS. 

2 






mm. 

134741 

21 

2 






121563 

147305 

22 

11 






104721 

105621 

22 

2 

11 

4111 

2241 

1 


163327 

mm 

a 

11 






11714.3 

143171 

31 

i 






153677 

mm 

11 

2 






163767 

167747 

21 

1 

12 

1121 1 

42£1 

1 


113625 

124751 

21 

11 

1£ 

2257305 

524287 

1 


102643 

142641 

21 

1 

20 

7.6*4141 

1241121 

1 

12 

120403 

140205 

21 

3 

11 

12117 

4221 

l 


145453 

152323 

41 

2 






123453 

1*2345 

41 

12 






123433 

154435 

41 

a 






113637 

1747?! 

41 

41 

11 

117.37 

11*1 

1 

12 

263677 

mm 

21 

2 

& 

717 

255 

1 
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431455 

551461 

Z2. 

3 

43 6407 

701361 

31 


441715 

HZ411 

3i 

£ 

430005 

500061 

31 

22 

540663 

6330.1? 

36 

1 

542667 

733215 

49 

30 

437771 

477761 

50 

17 

452075 

570271 

68 

3 

1000201 

1004001 

18 

7 

3147625 

1247631 

31 

20 


11 




1£ 

1352111 

2621jj 

1 

10 

‘ mi 

1023 

1 

10 

2257 

1023 

1 

11 

63 07 

2047 

1 

12 

13773 

1365 

3 

11 

4053 

2047 

1 

11 

6367 

20H 

1 
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r 

f(x) of 
INDEX 1 

x r f(l/x) 

T(x) 

D X 

FACTOR OF T( i) LISTED ELSEWHERE 
COEFF. IN 

r OCTAL PERIOD INDEX 

14 

1044604 

1204121 

21 

11 

11 

21411 

16383 

1 


1110535 

mam 

21 

& 

11 

242411 

121421 

1 


1037433 

1141241 

21 

1 

11 

241442 

224221 

1 


1443347 

1631423. 

44 

41 

1 

1421 

211 

1 

1£ 

2211422 

3647235 

21 

2 






2327423 

3107531 

21 

1 






2352103 

1Q212J1 

27 

7 

8 

477 

85 

3 


111141 1 

3745133 

27 

8 

8 

607 

255 

1 


224.6113 

3221475 

28 

11 






2-113141 

3 0656 2 5 

21 

21 

14 

2411 

241 

2 


2313171 

2363231 

24 

1 

11 

4671 

2241 

1 
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APPENDIX C 


TRINOMIAL OF LEAST DEGREE THAT CONTAINS 
A GIVEN IRREDUCIBLE NONPRIMITIVE POLYNOMIAL 
OF DEGREE r OVER GF(2) AS A FACTOR 


APPENDIX C 


TRINOMIAL OF LEAST DEGREE THAT CONTAINS 
A GIVEN IRREDUCIBLE NONPRIMITIVE POLYNOMIAL 
OF DEGREE r OVER GF(2) AS A FACTOR 


r 

OOEFF. OF 
h(x) IN 
OCTAL 

T(x) 

a a 

IRREDUCIBLE 
FACTORS OF T(x) 
IN OCTAL 

DEGREE 
OF FACTOR 

PERIOD 

INDEX 

4 

111 

4 

3 

111 

4 

£ 

1 


111 

9 

6 

13 

3 

7 

1 





111 

4 

21 

4 


£ 

367 

ii 

5 

13 

3 

7 

1 





541 

£ 

£4 

4 


ill 

16 

1 

551* 

8 

255 

l 





514 

£ 

£5 

4 


ill 

27 

7 

ill 

£ 

£4 

4 





2352103* 

19 

524287 

l 


ill 

33 

18 

13 

3 

7 

l 





127 

6 

21 

3 





561 

8 

255 

1 





607 

8 

255 

1 





414 

£ 

84 

4 


433 

34 

17 

7 

2 

3 

l 





415* 

£ 

51 

4 





661* 

8 

51 

5 





637 

8 

51 

5 





763* 

8 

51 

5 


ill 

34 

17 

7 

2 

3 

1 





433* 

8 

51 

5 





661* 

8 

51 

5 





ill 

£ 

51 

4 





763* 

8 

51 

5 


£ 

mi 

£ l 

1284 

£ 

24 

2 


1141 

17 10 

7 

2 

3 

l 




147 

6 

63 

l 




1145 

£ 

24 

2 




r 


£ 


14 


OOEFF. OF IRREDUCIBLE 


h(z) IN 
OCTAL 

T(x) 

n 

A 

FACTORS OF T<x) 
IN OCTAL 

DEGREE 
OF FACTOR 

PERIOD 

IN DEI 

mi 

25 

6 

J 5 

3 

7 

1 




mi 

£ 

21 

2 




36403* 

13 

8191 

l 

1027 

26 

11 

13 

3 

7 

l 




mi 

£ 

21 

2 




57201* 

14 

16383 

l 

3247 

15 

6 

73 

5 

31 

l 




3247 

14 

£1 

11 

1211 

19 

9 

1? 75* 

9 

511 

l 




mi 

IS 

211 

1 

2035 

19 

17 

7 

2 

3 

l 




357* 

7 

127 

1 




mi 

14 

211 

1 

2 ill 

21 

15 

57 

5 

31 

1 




111 

6 

9 

7 




2413 

14 

21 

11 

2251 

22 

11 

7 

2 

3 

1 




nil 

14 

21 

21 




3043* 

10 

33 

31 

3043 

22 

11 

7 

2 

3 

1 




2251* 

10 

33 

31 




ion 

14 

21 

21 

mi 

24 

15 

13 

3 

7 

1 




45 

5 

31 

1 




127 

6 

21 

3 




24€i 

14 

£1 

11 

mi 

26 

9 

2111 

14 

HI 

1 




272107* 

16 

21845 

3 

mi 

29 

21 

2111 

14 

211 

1 




2516543* 

19 

524287 

1 
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OOEFF. OF 
h(z) IN 
OCTAL 

T(z) 

n t 

IRREDUCIBLE 
FACTORS OF T(x) 
IN OCTAL 

DEGREE 
OF FACTOR 

PERIOD 

INDEX 
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